Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: 5abT7aK2enU8QKHGeLQaWDoc3FpBnd5gIENUz/TrKK0=
Subject key identifier: 86:3B:E3:1D:C5:4C:9F:2E:B4:2F:BE:2A:FC:44:53:9A:8A:35:41:DD
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019671F87B3F1AC2954333DFA20F020DFD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 12ED
Signing time: Sat 26 Apr 2025 12:00:32 +0000
Manifest this update: Sat 26 Apr 2025 12:00:32 +0000
Manifest next update: Sun 27 Apr 2025 12:00:32 +0000
Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=)
2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=)
3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: /ZF5KvfOmDdhagbd0HU07cx65oUIDugy9hOXARENojw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:7b:3f:1a:c2:95:43:33:df:a2:0f:02:0d:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Apr 26 12:00:32 2025 GMT
Not After : Apr 27 12:00:32 2025 GMT
Subject: CN=863be31dc54c9f2eb42fbe2afc44539a8a3541dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:d1:f6:f3:8c:f5:f0:05:d1:ed:07:f0:7b:
0f:cd:3b:d6:62:75:ec:95:92:7f:83:ab:91:fa:fc:
b8:77:30:b2:12:cc:4e:e3:63:97:29:a3:67:e3:94:
30:7d:6d:47:c6:ea:43:2d:13:b6:43:b1:b6:49:7d:
b2:70:7b:3a:31:8f:25:b9:c1:2d:02:04:7e:4e:c5:
64:14:37:0a:cb:6f:34:08:6d:f7:81:af:57:a0:54:
3e:f8:09:94:c6:c6:a6:d7:da:f9:8a:d7:a0:d7:68:
1f:59:b4:81:77:c5:d9:0a:18:04:70:b6:27:b5:10:
dd:c9:06:61:75:73:98:e8:fb:e5:92:e7:44:cc:6e:
15:db:1d:46:2e:95:ba:60:a7:65:b2:41:e9:30:a4:
76:98:bc:48:f4:c1:d1:53:41:e4:b8:11:3b:1f:19:
f2:dd:8c:b9:f1:65:29:22:58:3d:da:9e:4c:ad:6a:
1d:5c:6b:85:7b:08:e6:bc:ea:b6:d1:f3:21:03:44:
eb:4f:73:2b:42:9c:ac:38:fb:a0:60:1d:ae:0e:4c:
c8:34:08:4f:7c:29:f9:2f:1f:f1:c1:2b:46:9f:ba:
ef:88:8c:42:60:a7:62:ee:80:57:0d:fd:ea:ba:ef:
02:36:8a:c8:06:23:db:db:a7:b9:0f:ed:bf:b5:1d:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:E3:1D:C5:4C:9F:2E:B4:2F:BE:2A:FC:44:53:9A:8A:35:41:DD
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:8a:1c:64:0c:32:48:05:d0:46:77:12:1f:16:15:b9:17:
81:01:b0:8d:8d:fc:f4:68:57:29:a0:fb:47:dd:27:da:65:09:
85:a9:00:b4:aa:27:54:96:17:c2:12:47:c7:03:c5:68:d6:e6:
74:1c:a7:14:26:dc:5a:66:7d:a2:6f:0a:1d:f6:de:31:e4:5b:
bf:dd:b5:b5:0a:3b:27:ed:af:11:03:b5:a9:a6:66:31:46:b2:
d5:12:b9:e7:71:3f:c3:6e:95:ec:74:ea:f5:52:7d:cd:49:be:
db:ed:50:21:b7:54:db:c0:44:93:f4:b5:e9:85:29:cf:5f:0a:
e4:9f:38:40:a7:8c:03:1b:78:65:cc:eb:f6:6f:17:86:5f:15:
3b:1b:9b:43:4c:59:d2:13:40:ea:d2:ff:12:32:76:58:7b:fd:
ed:91:56:16:52:cd:e5:e3:59:62:11:c7:1d:38:5c:47:d9:09:
67:4c:21:f7:2c:a5:67:f0:ab:2b:41:30:d5:57:b3:71:19:4a:
f7:f8:27:10:9b:69:54:09:0a:92:76:19:cf:cc:bf:e5:d3:b5:
18:10:25:0b:e4:83:8e:5b:26:c3:ef:e9:f5:fd:f3:60:96:19:
1a:85:48:28:86:bd:ab:ad:b6:9f:95:3e:4b:5e:75:ae:e9:3e:
30:69:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:16 2025 by rpki-client