
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File: vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier: BOj7ghYC+Lz+BDKqyjewDLk3OX4MdU6Hj3fSGVc4uog=
Subject key identifier: F3:AF:CE:09:6E:B2:59:EC:64:6C:68:14:36:5D:6C:32:8B:F2:FE:7A
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial: 019674F97E00FCD23FEB71614883A7F6BA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number: 10DC
Signing time: Sun 27 Apr 2025 02:00:29 +0000
Manifest this update: Sun 27 Apr 2025 02:00:29 +0000
Manifest next update: Mon 28 Apr 2025 02:00:29 +0000
Files and hashes: 1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: xHPpHVplVrIPlqmCcq1q7rPtl1jAlfkaXAXwSa5GsVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:7e:00:fc:d2:3f:eb:71:61:48:83:a7:f6:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Validity
Not Before: Apr 27 02:00:29 2025 GMT
Not After : Apr 28 02:00:29 2025 GMT
Subject: CN=f3afce096eb259ec646c6814365d6c328bf2fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:11:9c:2b:bc:2b:85:48:7b:ad:bd:d8:fb:
9d:64:83:45:12:b8:de:1e:8b:03:8c:0d:fb:c7:a1:
21:24:2d:ca:51:10:99:fe:bd:cb:93:7c:e1:c4:26:
4d:67:78:16:10:9a:b4:ef:7a:d6:7c:69:6c:a9:48:
64:61:3b:78:a9:f4:f3:ef:82:0b:ad:53:85:cc:5a:
30:7b:4d:85:dd:94:b8:a4:30:e9:8e:34:09:40:65:
d9:4f:21:12:69:14:12:b8:3d:be:81:b3:75:98:d0:
db:6d:fb:42:f5:da:a8:8e:15:30:1d:8e:bd:3a:80:
6e:09:e0:a2:af:91:3a:90:12:12:ce:ec:c0:4b:84:
c1:a9:0d:11:50:70:14:0c:b9:8a:0b:73:08:f9:e9:
e0:6e:ab:fa:ed:51:63:74:c0:a0:15:03:d7:6f:53:
51:98:d5:c5:c5:d0:10:38:9b:71:56:76:ef:97:c4:
87:34:96:c8:a7:47:b9:d1:5c:d6:a8:7b:65:d1:22:
af:48:aa:dc:43:98:92:4c:c6:73:66:b3:0d:d9:0d:
90:49:4e:78:07:3c:31:2e:88:6d:d1:68:ea:83:36:
08:6d:2e:ef:d3:0f:47:fb:0b:02:0c:22:f8:c3:ae:
07:50:6c:64:76:3d:3c:36:f9:7c:93:03:44:56:05:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AF:CE:09:6E:B2:59:EC:64:6C:68:14:36:5D:6C:32:8B:F2:FE:7A
X509v3 Authority Key Identifier:
keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:f8:99:2d:7b:ab:0b:7d:61:74:af:de:de:86:e3:f2:12:
3d:50:f6:b3:b7:8d:82:d6:cb:b3:d5:61:3e:6e:bd:c1:16:3c:
ab:e3:79:b9:8d:7e:66:ce:74:ee:82:09:f6:89:c8:39:a6:e0:
e8:22:a3:a8:3d:c9:f3:37:22:c1:72:5b:0d:96:e5:b3:f7:25:
ea:a7:ee:62:63:44:f4:f4:56:4b:61:ff:43:e7:13:5e:19:93:
6d:6b:45:b0:44:84:1e:71:e5:85:e6:dc:9f:f8:09:37:fe:55:
12:dd:46:84:85:32:90:4b:c5:df:60:69:ce:c0:51:ca:57:18:
34:4f:f4:95:41:9f:e6:56:f0:8a:85:1f:7b:52:4e:ef:a4:e3:
73:85:05:5b:f7:ff:7b:d9:83:fa:03:60:83:fa:a0:57:cc:d3:
20:06:a7:29:7b:af:9d:d2:eb:5f:5d:f0:3b:aa:bd:b0:3e:32:
81:77:ef:4e:7d:f2:a6:6d:f6:2a:22:8f:2e:05:b0:ff:ec:bf:
4b:50:1d:20:c5:bd:a2:6b:09:8c:c1:2b:9c:51:57:98:95:f7:
7b:59:e6:02:f0:4d:11:8f:14:18:bc:4c:94:a5:7b:67:58:e2:
bb:a5:47:d2:9c:59:5a:5a:fc:40:8b:60:3d:e6:2a:65:2f:0c:
9f:43:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:42:06 2025 by rpki-client