Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: pnmYh6/mkblsHFpttSCpx0vDjoT35mbyNbAT2fQLPnA=
Subject key identifier: C5:30:79:B5:BE:E5:48:79:82:1D:B8:6D:C8:27:BC:F2:73:A5:C6:7B
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019677FAB4252F05F488FF4BCDCF3854D20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0BF7
Signing time: Sun 27 Apr 2025 16:00:40 +0000
Manifest this update: Sun 27 Apr 2025 16:00:40 +0000
Manifest next update: Mon 28 Apr 2025 16:00:40 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: rJfOVcENx/4K0In42reFoA2OVEs7ICnv5mCdnPDRRdg=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:b4:25:2f:05:f4:88:ff:4b:cd:cf:38:54:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Apr 27 16:00:40 2025 GMT
Not After : Apr 28 16:00:40 2025 GMT
Subject: CN=c53079b5bee54879821db86dc827bcf273a5c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:e0:af:e5:1a:ff:2c:a1:e1:a8:7f:57:ee:
58:7c:7b:be:d4:a1:84:1c:12:3d:d6:5b:14:a4:bd:
22:75:6a:80:97:7d:66:dd:ed:58:c7:e2:fe:7b:d0:
4d:4e:3a:fd:bb:c3:35:4c:42:53:38:a7:c3:4d:bb:
de:8b:bd:35:dc:71:0a:d1:32:af:a1:ff:15:d7:a0:
5c:b5:16:20:99:24:f8:59:d8:4d:0e:5d:ac:ad:3d:
7b:4f:58:04:1a:95:bf:e9:2b:35:ad:4a:e1:95:c1:
8c:01:6e:23:68:25:17:c7:d0:d0:2f:f5:35:fe:02:
14:8e:56:37:24:32:af:2b:78:22:1f:68:13:79:63:
5d:68:4a:d2:24:a1:81:f0:98:21:81:36:30:0c:17:
2c:e2:34:ea:47:9e:67:41:e5:f7:17:68:db:14:d7:
3f:f4:06:a8:07:08:3e:77:da:3a:cb:bb:c8:df:0e:
38:17:54:5a:1c:12:ef:07:30:5d:1b:b9:ff:d8:66:
84:81:a2:8c:fe:54:2d:54:f9:99:42:e4:ef:c0:32:
21:1b:8a:8a:28:37:e5:77:87:a5:1b:5d:83:8c:26:
76:1f:d5:52:6a:57:ca:ed:16:85:c9:e9:d9:b7:76:
3e:9d:0f:c3:d3:44:20:91:83:a6:2f:97:f1:43:d3:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:79:B5:BE:E5:48:79:82:1D:B8:6D:C8:27:BC:F2:73:A5:C6:7B
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:e9:e0:87:10:ae:a4:98:78:f7:51:47:3c:81:94:45:64:
a0:ac:04:5e:b0:71:c5:32:4a:07:a1:50:1b:9d:de:cf:ef:43:
4d:5d:2a:f7:7d:ee:45:d3:cf:79:5f:12:d5:94:72:e2:a8:c2:
a0:2e:41:05:9e:41:37:14:d0:c7:30:13:7a:dc:9b:bb:f0:e2:
e1:96:0e:2b:98:df:e6:1f:bf:1f:d6:64:e9:61:79:1c:96:ee:
51:ae:7b:f1:f5:50:b9:31:7f:d4:da:1e:ef:de:63:3a:ac:60:
e6:bb:53:22:b8:61:10:f4:b6:ab:9a:5c:cc:f5:43:91:64:da:
43:cd:71:54:80:74:37:cf:a1:9a:c3:b3:57:70:a8:0d:ae:d3:
d7:15:51:01:50:f6:4d:32:34:58:fb:4b:bc:49:f5:e3:00:2a:
2d:98:4c:26:dc:19:c5:07:37:e4:70:90:e5:d2:1e:e7:39:0e:
6b:de:ba:8e:c2:ef:36:b4:85:fc:1f:79:52:9e:8b:e8:be:b0:
50:90:cf:1f:75:c4:ce:c8:f9:b6:6d:6c:4d:5b:6c:88:e6:21:
a2:35:d7:2c:de:e7:d2:94:5c:8b:63:fc:5d:ec:cf:c4:c9:b3:
95:c0:9e:91:28:12:ee:4c:13:53:c6:3c:fa:b1:86:76:1a:64:
35:3b:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:15 2025 by rpki-client