Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: kzR+xEQJqAvUzGrLuTkBu5B/JnQxGWhfS/OB3mK6v6A=
Subject key identifier: F1:50:E0:38:97:B7:8A:85:18:41:5B:3C:E1:2D:BE:51:03:04:52:DD
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 0196789F3B43C54BF90603CF099F1165C863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 11F6
Signing time: Sun 27 Apr 2025 19:00:23 +0000
Manifest this update: Sun 27 Apr 2025 19:00:23 +0000
Manifest next update: Mon 28 Apr 2025 19:00:23 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: vxGgCBxxR6CiqQE2OBpDPwVCxYRAKsmHeCWslnIfGWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:3b:43:c5:4b:f9:06:03:cf:09:9f:11:65:c8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Apr 27 19:00:23 2025 GMT
Not After : Apr 28 19:00:23 2025 GMT
Subject: CN=f150e03897b78a8518415b3ce12dbe51030452dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:e1:8c:47:2c:d7:cf:fd:17:27:16:81:14:
0f:13:d1:76:34:1a:8a:8a:36:dc:83:07:fc:76:6c:
50:bb:40:84:ff:92:8e:38:fe:7e:ca:7c:18:bf:94:
8e:cb:b6:a7:cc:41:79:4d:24:8b:bc:76:00:3d:25:
bc:50:53:77:12:45:01:ee:01:56:98:ba:0e:aa:13:
62:cf:ef:03:32:e0:c1:ea:47:17:84:9a:7e:23:5c:
42:0b:15:45:16:50:23:9b:24:b5:fe:52:22:01:8d:
28:1f:33:13:3c:cd:59:20:48:64:c1:6e:d9:0f:2c:
13:ee:6c:fb:78:d4:dc:e4:c5:f6:34:7d:59:18:6a:
bc:e6:ec:45:ab:e2:42:05:37:75:52:c3:52:34:70:
6c:c2:4b:e0:2d:7a:53:f5:95:69:7f:e9:ef:9f:15:
5b:4b:51:4f:9e:ff:69:f7:6d:c3:eb:14:48:f7:aa:
c3:c4:0f:18:d4:71:68:9b:68:90:b0:65:a2:a8:db:
a1:7a:9e:a2:40:cb:01:6e:e7:57:3f:26:a6:09:70:
6c:ac:df:b2:20:ad:44:dd:38:1d:f1:57:e0:01:70:
e4:2b:f1:4a:04:28:b3:dc:40:ec:67:a6:d9:ce:47:
3b:59:06:cd:ba:e1:a6:8d:a9:02:53:f2:35:aa:02:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:E0:38:97:B7:8A:85:18:41:5B:3C:E1:2D:BE:51:03:04:52:DD
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:42:6f:bd:4f:e3:ea:3d:eb:c1:79:6a:72:61:a6:46:a5:bc:
84:90:fb:e1:f6:73:c8:ff:47:5c:0f:5d:32:df:2d:a8:76:11:
1e:78:f8:d5:72:f7:15:0f:7c:03:42:07:e9:d0:0e:fe:3c:50:
d8:a7:be:af:10:d9:85:58:5c:5a:59:94:d2:32:3f:a9:7c:a7:
a8:f6:82:e9:e0:cf:97:cd:09:9a:ad:e6:20:f3:01:2c:ff:8b:
23:5e:0e:4d:59:b5:92:ad:c9:29:80:e8:20:ea:86:ae:21:d0:
46:a4:df:3e:71:4a:44:0e:4f:82:2e:09:da:e9:4b:0d:17:ad:
ce:3d:6b:6e:cf:54:bc:3c:39:5e:50:04:df:a4:d7:7b:fc:26:
17:0d:73:57:63:e2:12:70:ff:a7:a1:b9:50:b6:7a:bb:2c:00:
4b:6d:8c:95:b2:ef:d2:c3:f5:8e:65:b9:02:5a:d9:1d:fe:55:
bd:b1:b7:38:0d:e5:16:d2:1d:cf:ab:f5:9b:0a:ee:b9:c2:0f:
d9:58:6c:79:76:e6:d4:de:52:38:9e:8d:25:55:c0:56:32:4a:
bf:10:c1:04:0a:bb:27:f4:eb:3e:d8:64:d8:92:b6:39:06:57:
f9:fe:f9:57:92:ee:c2:c7:aa:57:e3:5a:fa:d9:d0:82:67:c9:
b8:b1:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:16:00 2025 by rpki-client