Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: 7HrdjrKoTUAwQlFiS78GXXw2/7R3IdNwCNBNLW9HiR0=
Subject key identifier: 56:C9:29:95:0A:F9:7F:D7:D9:F3:C9:C8:88:4B:CF:2D:C0:E7:EF:4B
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 0196741DF7310DC0F744C5B9735E7B17047D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 22:00:42 +0000
Manifest this update: Sat 26 Apr 2025 22:00:42 +0000
Manifest next update: Sun 27 Apr 2025 22:00:42 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: R4ui7RGp1Dm91aqnFEpdXfO04RRr9LDuVk0cMBrR15A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:f7:31:0d:c0:f7:44:c5:b9:73:5e:7b:17:04:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Apr 26 22:00:42 2025 GMT
Not After : Apr 27 22:00:42 2025 GMT
Subject: CN=56c929950af97fd7d9f3c9c8884bcf2dc0e7ef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:01:57:0b:a5:ca:94:95:d3:7d:e0:3a:50:
64:92:cf:47:0c:9e:e4:32:5c:68:ce:4a:66:39:ca:
78:58:1f:3d:49:22:02:5a:2d:e8:42:4f:14:fb:a5:
79:a0:a5:68:cf:96:97:9a:79:88:4b:ac:71:e7:bb:
43:09:6d:59:d5:8f:fa:76:12:01:a3:7a:d1:01:8e:
15:0e:1b:ca:83:41:0c:a9:04:be:74:fe:69:0b:d9:
44:8f:19:6b:ea:c9:cb:56:9c:2d:c7:c0:96:b0:d9:
87:e8:b5:99:51:73:67:6b:55:1d:ad:23:b9:bb:4c:
dd:04:fc:63:f7:79:30:9c:12:ee:c4:0e:26:8b:65:
c6:36:ab:3f:4a:07:bc:e9:c4:7c:68:3f:e7:83:29:
75:50:d0:63:9f:40:a0:58:0c:e0:a3:32:15:a8:04:
70:fb:95:07:17:ea:ca:6e:61:24:c2:d2:e7:21:18:
0b:ca:e2:a3:4a:cf:e2:ec:97:79:fa:b7:35:c0:58:
26:81:d3:0c:8e:b7:57:74:58:99:ad:24:ef:65:e3:
50:de:19:6a:c3:0b:7d:3b:4c:71:67:ff:b0:78:1f:
7e:3b:57:4d:d8:f5:d1:88:35:42:68:78:bf:18:69:
df:4d:d5:7c:38:97:98:30:15:5e:c9:89:99:52:29:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:29:95:0A:F9:7F:D7:D9:F3:C9:C8:88:4B:CF:2D:C0:E7:EF:4B
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4b:7a:e6:da:5a:46:57:23:d0:5f:a3:00:d8:6e:f1:56:ec:
6d:8e:e2:a7:cb:06:80:f8:28:51:6f:1a:25:ff:82:38:70:a6:
4b:c7:9e:27:de:1f:65:8d:dd:9a:93:b7:6a:26:65:34:1f:a8:
14:36:bd:ca:44:37:d6:f4:55:12:d3:c6:31:96:e5:bf:2f:a9:
ac:eb:98:41:10:f3:61:78:dc:25:65:32:e0:77:0b:09:69:39:
5d:20:92:93:78:81:f3:94:9b:70:3a:7d:2a:49:ab:ac:3e:22:
4b:f5:25:1c:42:b3:65:9b:f5:2a:4a:d9:5b:06:1a:7e:bd:ef:
d6:88:6c:a1:0c:67:0a:7b:15:a2:ec:31:60:8b:c8:f1:aa:9e:
f9:3b:4a:44:64:a2:26:a1:b9:91:3a:37:0e:3b:fd:74:94:f2:
db:2d:26:d9:3f:c8:bd:3e:47:68:d6:d7:53:2f:bd:34:02:f5:
b5:eb:b1:14:e4:e9:6c:09:1f:01:d3:6d:0e:90:e7:0d:08:ed:
cc:1e:2d:a8:12:1b:37:bf:cf:3d:4a:41:fe:8d:84:95:82:07:
2d:28:01:fe:9a:60:f6:00:56:d3:36:52:10:48:e0:89:ae:20:
20:83:18:f8:3f:ad:eb:d5:e5:c9:28:25:0c:10:f5:52:a0:9c:
1d:48:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client