Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File: VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier: W9eiIvv9Y3j/uAWKHk3DLxcxy9LHT3pDx8BDV/vRH4A=
Subject key identifier: A1:CF:F6:4B:61:E5:05:AF:2C:2B:C1:62:5F:D4:EE:D9:D0:5E:3B:A5
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 019675D565A54441780542CC4BB86FB92D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 06:00:41 +0000
Manifest this update: Sun 27 Apr 2025 06:00:41 +0000
Manifest next update: Mon 28 Apr 2025 06:00:41 +0000
Files and hashes: 1: 4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa (hash: /pXE4tdwv3dfHDvdrnJG5/fTpZ3e7ceFkxfrRASJi2o=)
2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: 0AgRQA+mHH72rjsy5lFUBBkhcrVsodV2J60KT+vpYuE=)
3: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:65:a5:44:41:78:05:42:cc:4b:b8:6f:b9:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Apr 27 06:00:41 2025 GMT
Not After : Apr 28 06:00:41 2025 GMT
Subject: CN=a1cff64b61e505af2c2bc1625fd4eed9d05e3ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:40:d3:4f:fc:3e:bb:45:72:e7:c1:3a:cc:
e8:a1:74:a9:4e:c8:61:18:80:0e:90:c1:ae:a1:14:
ec:a5:8e:ad:7c:8d:73:2c:ca:01:6d:5e:23:2b:b2:
2e:b7:88:86:56:10:84:cd:af:54:c8:41:a5:fb:5c:
73:0c:ea:2e:88:0b:64:15:06:57:5a:0a:08:89:bd:
44:61:92:56:fc:2a:cc:dc:e3:7d:a6:59:83:78:8d:
6c:9c:a2:a4:0c:13:89:ed:5f:f5:49:cc:d7:85:1d:
e7:2f:0d:37:1f:1f:52:49:1c:12:17:0b:dd:82:a3:
ea:78:59:e4:16:e3:cf:c0:29:c0:f1:55:65:ef:92:
df:e2:05:28:c1:02:09:e3:d1:c9:31:f4:27:3e:33:
7b:98:f7:27:d9:d4:78:a0:9f:d6:87:01:df:88:10:
d2:fd:9c:1e:ff:5b:cb:24:ee:38:2b:76:c4:1e:2e:
4a:ae:48:4a:a3:aa:6c:55:2c:e3:de:7f:c8:15:cf:
22:74:ab:3e:2b:5a:0e:52:5d:9b:d9:a4:6d:7f:c5:
db:72:41:11:69:f8:02:36:7c:c1:dd:87:fb:56:9a:
63:b7:a5:7f:72:f6:4a:4e:93:d1:0c:23:68:32:55:
4e:13:cc:3f:db:23:10:2b:dc:ac:21:9d:ee:12:8a:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:F6:4B:61:E5:05:AF:2C:2B:C1:62:5F:D4:EE:D9:D0:5E:3B:A5
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a0:0e:e1:e6:70:08:5e:c0:6f:65:2f:54:56:24:53:b0:07:
18:27:2d:62:41:d0:a6:87:72:44:53:d2:70:d1:aa:01:0d:81:
34:e8:88:5e:62:b7:e6:66:cb:84:d1:44:0b:0c:73:41:e7:93:
ec:70:9d:f2:05:9c:34:0e:7c:57:32:fa:66:d0:7c:58:be:86:
33:26:40:1d:35:7f:0a:57:e1:1e:99:ea:25:9e:6d:56:65:f1:
a4:db:95:0b:fe:fe:fc:34:e9:be:19:f1:34:47:70:37:ff:40:
bc:48:c8:fe:4f:4c:ef:5b:58:bc:7f:8d:9e:43:94:f1:e2:e3:
20:13:5d:29:94:62:00:cc:85:be:71:67:25:74:f4:cb:a4:e6:
f1:36:c6:46:c9:c6:01:33:4f:fd:fb:7f:42:1a:eb:8c:c5:2d:
82:c1:26:da:40:f7:2b:1a:9f:cf:d4:8c:c2:7a:dc:ff:b8:22:
5d:02:cd:0e:9c:17:58:c0:d8:01:aa:5e:34:49:ce:c4:94:be:
1b:18:b3:33:84:8a:c6:08:df:cd:73:fd:f1:c3:cb:ff:cf:41:
bf:70:f0:21:4f:08:7b:af:3c:4a:f5:83:ae:64:6e:46:41:24:
20:d1:b7:70:ef:16:2c:19:f0:52:e4:21:10:b9:e7:15:a1:3a:
0d:ab:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:08 2025 by rpki-client