Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: /6z2fE8E1S4UeQi8wbeKjtwI0z1d86xCyev5VGlSag0=
Subject key identifier: 2F:58:FA:2F:22:70:9C:22:1B:F2:C5:BA:32:BD:82:EB:BD:AE:C6:9B
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019676E86C59BFA696CBBB9EE286F9B78584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 12D6
Signing time: Sun 27 Apr 2025 11:01:05 +0000
Manifest this update: Sun 27 Apr 2025 11:01:05 +0000
Manifest next update: Mon 28 Apr 2025 11:01:05 +0000
Files and hashes: 1: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (hash: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: bHPbQ2YjoFKR6Ds+P9BQvGDpOdrGCb14VQL6KKlgL6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:6c:59:bf:a6:96:cb:bb:9e:e2:86:f9:b7:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Apr 27 11:01:05 2025 GMT
Not After : Apr 28 11:01:05 2025 GMT
Subject: CN=2f58fa2f22709c221bf2c5ba32bd82ebbdaec69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:eb:fc:bb:ab:98:c5:26:79:07:29:77:48:
22:33:3e:24:a0:ae:95:a9:58:99:60:91:34:18:24:
ff:98:9e:da:ac:87:e8:73:4f:db:da:4d:90:d3:3f:
65:26:5b:fc:5b:41:c8:ff:0b:3a:41:6f:d2:56:27:
39:25:81:28:c5:f1:08:5e:a3:9e:85:c0:8b:e4:73:
46:2d:80:9f:1b:fe:e4:af:8e:40:30:c9:0a:e6:43:
47:29:df:72:3c:d0:03:0b:66:15:ba:df:ff:a6:2c:
cd:2e:e6:9c:77:9c:10:c9:a8:b9:dd:a5:1b:0e:bf:
6d:79:43:ea:fc:69:fb:9f:ac:f0:02:6d:32:c2:95:
c6:af:5c:f3:38:ef:a3:42:7e:14:3c:0d:8d:95:8c:
35:bb:4a:2b:ab:86:23:f0:f0:8b:fa:a7:a6:64:69:
ae:a5:28:57:12:08:75:cb:a8:9a:5a:70:5d:16:ed:
c5:72:f6:b0:62:66:90:7e:04:36:e7:d2:3f:24:87:
d9:b1:69:17:63:7c:7c:56:6b:14:ef:cb:3f:ee:16:
cd:30:ad:0e:bd:e9:48:4a:19:11:0c:01:ae:e0:1a:
8a:16:6d:4a:a3:1a:31:93:f6:1b:2f:bc:f4:cf:0c:
17:1e:6c:53:0d:32:af:ba:33:81:0b:85:32:11:61:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:FA:2F:22:70:9C:22:1B:F2:C5:BA:32:BD:82:EB:BD:AE:C6:9B
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7e:b9:33:58:17:5a:de:15:85:ec:d3:30:32:6f:2c:44:9a:
f9:36:8e:d5:ba:d7:f2:1e:f0:8a:46:1c:a7:83:5e:08:c4:86:
81:e5:9b:af:59:a7:fa:d9:d0:9e:09:f3:f1:6a:d2:53:d8:fc:
4b:b4:95:23:c2:e2:c3:72:5a:c2:09:2d:1c:31:58:89:4d:c3:
8d:ef:b8:57:57:19:6c:a1:6e:e7:0d:16:24:91:61:3e:bc:fa:
26:ed:10:6d:fb:97:5b:43:2d:dc:80:25:84:4e:04:13:c6:97:
2a:9f:d7:56:2e:f9:aa:db:98:28:68:1f:d4:04:e3:c8:43:7c:
3f:1e:2e:f8:cf:77:9a:79:36:9d:ca:96:3e:71:b0:7c:2b:82:
96:1c:db:41:b0:fb:69:3a:94:44:ec:58:16:52:b6:4c:08:36:
e2:ec:2e:cd:45:67:fe:f0:33:c8:d0:de:69:92:0d:f1:64:f8:
35:5f:44:af:80:12:48:6f:55:b3:6b:2e:9a:56:cd:96:2a:36:
76:75:6e:b7:1b:1d:59:a3:6d:58:c0:e4:f9:4e:0e:49:af:9b:
f7:62:25:92:c3:19:43:64:43:7a:2e:1d:12:f2:b6:fc:dc:0c:
91:b9:59:e5:d6:57:b7:1a:28:32:d2:da:aa:88:9c:65:16:93:
05:d1:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:08 2025 by rpki-client