Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: y3YXdINL+YZ39nYjHlwWop+EL0sXhIZdSo2P5CN5Csw=
Subject key identifier: E9:B8:01:DD:72:9B:61:A2:06:90:DE:C3:2E:D9:15:91:22:F7:DF:F3
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0196A389B6BF4D547C3FB4298CF330D61587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1004
Signing time: Tue 06 May 2025 03:00:33 +0000
Manifest this update: Tue 06 May 2025 03:00:33 +0000
Manifest next update: Wed 07 May 2025 03:00:33 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: Lo7urbhl2Je5ttiA7bjj/cWd7jykZ/20UCskTOg2UVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:b6:bf:4d:54:7c:3f:b4:29:8c:f3:30:d6:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: May 6 03:00:33 2025 GMT
Not After : May 7 03:00:33 2025 GMT
Subject: CN=e9b801dd729b61a20690dec32ed9159122f7dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:37:e9:d0:5d:9b:fc:4c:c0:f5:e2:81:49:
72:9b:75:b7:0d:17:3c:28:b1:f1:89:d0:8f:68:f0:
89:89:94:1a:bf:85:f1:49:38:6e:20:c0:55:1e:3c:
fd:1d:16:bc:99:05:d7:6e:7e:6b:61:3b:a7:71:47:
43:c6:7c:c4:d1:2d:4c:11:ac:9c:70:4f:d4:86:99:
29:a2:32:c4:3d:f1:60:54:32:35:2b:41:a8:11:6f:
32:32:38:4e:74:4f:98:3f:2c:da:74:7b:80:91:92:
0b:70:01:04:8d:57:d8:ec:10:54:74:91:b7:fe:dc:
72:f8:94:f1:8d:d5:83:a1:d7:65:37:73:7d:e2:ec:
e5:a9:4a:f6:5a:4e:dc:89:de:b9:1d:6c:84:a8:b6:
d2:73:0f:60:11:31:46:00:71:98:81:7f:c8:d9:27:
24:a3:bb:dd:b0:95:aa:3f:7e:2e:e5:38:1e:ff:4b:
5b:ce:5b:5c:39:68:5d:51:e9:6d:4b:07:5e:85:0a:
e5:c5:2b:7a:2d:bd:38:9a:dc:2c:7d:8b:4b:a1:f4:
3a:00:7c:6e:99:ed:6c:6a:ef:3a:f4:1f:5d:ad:4a:
f9:c1:ea:39:22:35:23:8d:e6:ed:4f:ea:65:f4:45:
81:17:1d:79:ae:20:95:d5:a0:32:38:61:7a:4a:ee:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:01:DD:72:9B:61:A2:06:90:DE:C3:2E:D9:15:91:22:F7:DF:F3
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:2c:91:d9:86:fd:e0:eb:33:33:11:9b:93:dc:af:d4:74:
f0:d6:1a:8c:50:be:38:b3:85:a6:05:11:58:70:63:8f:32:ea:
80:37:d4:0b:e4:2e:d2:a1:95:1e:f9:9c:88:c2:79:28:f4:e1:
ca:3c:3d:d3:33:a9:98:a6:97:5e:c8:e0:34:76:9a:ba:12:18:
50:f7:c2:7d:79:ce:ed:bc:2b:d1:95:94:ed:72:cb:57:5e:a7:
3a:70:68:f8:77:3a:3c:ad:49:21:2d:43:bc:bb:3c:0e:12:10:
bb:18:00:8e:c7:3b:30:9f:cc:d4:ea:32:7f:4e:ea:2c:89:3b:
46:de:93:36:b2:6b:a1:23:ee:50:97:7a:34:dd:52:61:32:a1:
8f:2a:bf:8a:31:e8:ce:67:ae:99:3c:35:78:3a:65:9c:4b:b0:
6c:6c:ce:c6:0e:f1:12:1e:5d:89:5b:e8:20:96:03:47:ad:2c:
90:06:07:1d:1a:0e:0d:69:51:d0:8e:2b:dd:35:b2:2b:a0:52:
97:42:86:e0:89:89:9d:d2:d1:8d:a6:8a:58:8c:bb:65:84:c3:
c4:80:78:8e:b0:a9:46:ac:ed:ad:e1:70:ba:bb:fc:f2:a7:6c:
c8:cf:0e:7c:e8:31:36:1d:14:04:c2:85:f2:37:38:4c:3b:51:
42:40:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:23:52 2025 by rpki-client