Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
File: vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json)
Hash identifier: a9x3OtwGkYJx1Q67y8NYS8wbk7MylIVPIG2dp9630mI=
Subject key identifier: E6:A4:5E:5C:7F:56:AD:76:20:29:17:CE:67:9E:9C:3F:22:C6:7D:11
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 01967CE9E5DD09911792C1E9F8B9C1F67399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
Manifest number: 0E80
Signing time: Mon 28 Apr 2025 15:00:25 +0000
Manifest this update: Mon 28 Apr 2025 15:00:25 +0000
Manifest next update: Tue 29 Apr 2025 15:00:25 +0000
Files and hashes: 1: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (hash: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=)
2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: uXctY2bQxZfMD3Ky8paIxVCvq9iEBihszdjrfidcrmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:e5:dd:09:91:17:92:c1:e9:f8:b9:c1:f6:73:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Apr 28 15:00:25 2025 GMT
Not After : Apr 29 15:00:25 2025 GMT
Subject: CN=e6a45e5c7f56ad76202917ce679e9c3f22c67d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:ed:b9:47:37:0b:cf:0c:f8:3d:05:ef:20:
fd:c9:68:b0:c1:07:72:7d:58:d4:df:f7:33:aa:7a:
dc:92:a0:90:79:07:68:b3:74:a9:28:34:83:76:5b:
78:3c:d9:f5:0c:7a:fa:37:2c:12:c0:fe:81:1c:21:
e6:a9:a3:65:ae:a7:e7:ba:95:be:a6:2d:d4:3f:43:
8a:17:94:f3:dc:ba:55:11:13:cc:1c:3a:10:d5:cc:
59:45:72:1f:71:6e:9e:ea:ab:f7:91:c4:63:60:b9:
a5:29:ce:2b:73:d6:18:86:36:fd:7d:64:3c:b2:b5:
57:45:cc:f7:a4:4a:28:c8:68:87:c3:29:4b:0f:5f:
ce:87:93:97:86:cd:81:0c:4c:d4:42:8f:9f:12:0f:
64:48:88:8c:d8:3b:a5:4f:81:89:e7:82:c9:0b:bb:
16:f5:2d:b1:9a:fe:46:44:8f:dc:c3:c3:11:eb:e1:
a4:73:21:14:f5:57:ac:b2:89:dd:0a:6d:99:a1:8e:
9f:4f:22:be:26:ba:9c:cb:9e:4c:89:5a:85:a6:c2:
ef:8c:81:b4:ef:d6:6d:17:26:9a:89:12:49:94:01:
38:89:2d:e3:24:ef:bd:c7:da:c5:ba:eb:1a:fc:14:
a3:f8:df:cf:31:0f:57:13:21:33:98:40:67:52:d1:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:5E:5C:7F:56:AD:76:20:29:17:CE:67:9E:9C:3F:22:C6:7D:11
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:45:e5:7f:a0:20:d0:2c:6d:c1:98:20:f3:38:a7:99:be:
58:a4:a9:2d:95:15:c9:fd:ab:d9:db:a4:f1:b1:c7:35:8a:6c:
1a:11:25:5d:fb:3f:42:43:a5:96:35:05:6a:8c:6d:3f:60:48:
30:c9:db:bf:d7:a9:b4:1e:6f:68:a0:4f:c0:f4:bc:9f:a6:39:
96:13:b3:bd:32:4e:0a:c9:85:5a:e0:ee:6e:59:74:1a:d3:9d:
32:95:94:06:8f:2a:6b:83:be:8a:58:25:44:74:e0:de:48:45:
3b:5d:8b:67:6e:8d:f8:f0:b5:ac:92:70:f3:63:4c:ef:b8:47:
0a:0f:fc:e2:5e:9e:3e:da:e5:b5:0b:4f:40:a7:23:10:ab:ac:
26:db:2d:68:52:07:84:0f:a9:37:e2:c6:14:6e:0d:09:b7:f5:
2f:a1:90:31:65:52:86:3e:f4:d6:e8:4f:00:34:ae:aa:c5:d1:
76:bf:ab:b6:ca:c0:0a:e5:bd:be:c9:5e:35:cc:14:2a:7e:bb:
da:87:b9:ea:12:42:19:f2:78:9c:8c:72:2d:75:c3:5a:7c:d6:
1c:a0:c2:c9:2a:40:cb:01:32:3a:c1:37:86:78:5a:4b:65:51:
e4:4b:99:ab:ac:51:74:50:3a:8c:12:de:c3:ef:04:90:a2:17:
8a:42:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:44:00 2025 by rpki-client