Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: xY2AYDSMUWo1CrhC7PolhBeKa33GhbkyDOLpEJrp1e0=
Subject key identifier: 06:6C:77:A7:B8:B7:D8:A4:66:5C:F1:4E:CB:C0:31:47:23:80:D4:CD
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 019673E6C8ACC10A3945E4D03034564FBEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 1239
Signing time: Sat 26 Apr 2025 21:00:26 +0000
Manifest this update: Sat 26 Apr 2025 21:00:26 +0000
Manifest next update: Sun 27 Apr 2025 21:00:26 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: u90rNawy4+LM2qEx7fkusdakb2JCLzsjANN2Va9aaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:c8:ac:c1:0a:39:45:e4:d0:30:34:56:4f:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Apr 26 21:00:26 2025 GMT
Not After : Apr 27 21:00:26 2025 GMT
Subject: CN=066c77a7b8b7d8a4665cf14ecbc031472380d4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:be:2d:56:98:2d:4e:40:02:eb:66:95:f2:
40:a3:65:68:0e:c4:de:c7:d8:fb:25:f1:13:48:47:
27:76:b2:25:5f:ab:28:d4:16:32:7b:aa:0b:cc:c9:
04:c0:59:b7:62:27:19:4f:88:7f:e5:0c:03:9b:98:
b0:31:21:be:a8:39:be:31:e3:88:bd:60:c7:d9:d0:
ce:9f:bc:f8:f5:00:38:97:f8:31:8c:a9:ce:65:51:
22:ca:98:e4:ee:60:b7:d5:09:c5:ed:87:69:99:b3:
c0:b5:bb:1e:0e:ee:ec:3b:00:73:d0:04:00:81:e8:
0a:c1:be:fd:12:6d:0d:77:7b:31:3b:1e:32:a2:d2:
13:8c:09:9c:46:4e:8e:28:10:39:5e:f9:a6:e1:5e:
88:9d:8c:57:a6:6a:47:06:f0:7c:ee:94:98:5b:77:
4e:50:8b:eb:a4:0a:df:99:61:b4:63:d0:32:57:26:
a5:c5:61:1a:01:00:bc:2b:7e:f6:23:a5:08:0d:4a:
70:fb:b1:0b:e3:7e:cb:c7:4e:3e:96:11:d4:86:59:
86:3e:1b:a2:c8:6d:fe:9a:d8:21:55:b4:64:fd:d0:
f7:81:ea:c3:b2:65:6a:d6:cf:22:66:14:7c:27:f0:
f8:5f:bd:92:83:bb:b2:26:64:3d:65:6a:28:50:c4:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:77:A7:B8:B7:D8:A4:66:5C:F1:4E:CB:C0:31:47:23:80:D4:CD
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:4e:54:93:63:fb:aa:17:ed:2f:a3:0e:ac:cc:3d:59:ce:
83:8d:10:6c:a5:68:25:fc:eb:39:15:12:7b:e8:9e:90:01:77:
c1:4b:57:71:47:ca:06:b3:1a:e5:0c:21:24:d3:8d:51:60:19:
48:8c:80:69:ab:d7:ba:bd:35:07:a1:cd:49:de:d0:64:08:2c:
37:ab:88:28:16:ea:75:4a:a8:32:c8:bb:a0:d2:23:bc:ed:44:
9b:57:41:39:4d:ab:66:18:40:a4:84:58:7a:3e:75:69:c1:bb:
dd:77:53:17:7e:ac:97:9d:9e:f4:46:19:ba:d9:ce:ed:d4:e2:
3a:91:10:76:9e:42:35:2d:1d:ee:9c:0c:d9:d3:13:e8:2e:89:
a8:e5:bd:aa:5d:60:94:74:27:dc:44:96:29:90:d7:ae:8f:6f:
00:c8:d7:ea:e1:1c:d6:eb:b4:c0:99:70:dd:19:82:29:08:79:
f6:ba:72:64:f6:8a:77:49:ae:ca:35:78:f5:09:86:e1:31:69:
16:f9:3f:d7:23:7b:9b:f3:64:06:62:74:21:01:ed:c4:f5:69:
b0:c4:01:63:5a:49:e6:2d:e8:8a:de:06:9e:89:60:dd:de:64:
40:f0:1b:ce:fa:d3:9f:b1:e6:ca:cb:ec:40:04:8c:b0:98:e5:
62:87:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:23 2025 by rpki-client