Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: Jqm8C5ck+Id22oge1PnPk3V/h9gpyvvFhL6/RF4OH44=
Subject key identifier: AE:43:01:BC:56:2F:6A:E0:86:36:6F:BA:FA:8C:89:7E:CA:2C:F4:4E
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019671C2083DD925A714E9429DB03D8F5997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0882
Signing time: Sat 26 Apr 2025 11:01:03 +0000
Manifest this update: Sat 26 Apr 2025 11:01:03 +0000
Manifest next update: Sun 27 Apr 2025 11:01:03 +0000
Files and hashes: 1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=)
2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=)
3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: ZxfYrcvRcRXvDijg5Krf33xsJSgYyfQivI6M7c0er4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:08:3d:d9:25:a7:14:e9:42:9d:b0:3d:8f:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Apr 26 11:01:03 2025 GMT
Not After : Apr 27 11:01:03 2025 GMT
Subject: CN=ae4301bc562f6ae086366fbafa8c897eca2cf44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:f6:ed:f5:26:d0:c5:23:8d:39:b3:89:dc:
6c:ea:e0:43:1d:cb:25:cd:9f:3c:af:c0:e8:44:9e:
f7:fd:98:93:8f:56:a9:e2:32:db:e2:f1:e8:5f:44:
f0:ef:df:ac:df:62:3c:f8:9f:f6:1f:32:92:e9:78:
4d:d1:e0:ce:f9:d3:3f:16:13:24:7b:0c:b6:53:d1:
1b:97:25:7d:47:9b:ac:45:b3:b4:cb:e4:c1:66:2b:
bf:ba:b2:36:4d:ce:ef:f3:31:8d:02:29:7b:a8:48:
d5:04:27:dd:df:d1:a6:1c:28:fd:9f:d6:71:64:ef:
df:32:c5:d8:17:b0:3f:17:66:13:61:be:7b:8e:15:
24:3f:3c:7b:78:38:65:bf:2d:7e:79:56:08:d1:f3:
ab:3a:cc:02:fd:48:03:92:6d:05:e7:ca:cf:0e:4e:
b6:e2:8e:c4:50:9a:92:14:75:6e:52:b9:f1:b6:9b:
ab:b3:70:61:0d:3d:ca:af:b0:2a:02:4c:2a:71:19:
4d:65:92:63:5d:75:95:01:41:c0:06:09:4b:6a:27:
2d:02:77:a0:1c:99:6c:74:95:8c:ea:1f:e9:9f:99:
f3:c5:6c:a5:8f:f6:ae:fb:43:b3:bf:b2:1a:6a:ac:
f2:66:63:12:f0:1b:e9:57:f5:35:0d:25:fb:94:57:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:01:BC:56:2F:6A:E0:86:36:6F:BA:FA:8C:89:7E:CA:2C:F4:4E
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:a3:c9:5c:96:a1:a6:a6:d7:ec:df:d0:5a:4e:74:9e:be:
92:9d:36:dd:5a:ee:ca:93:ad:9c:3c:28:37:c5:23:89:31:17:
11:a2:0d:39:35:d7:05:bd:42:11:c5:fc:c9:fb:7f:0f:e1:be:
4c:b0:a8:5d:2f:81:ba:4a:78:b4:d6:d2:b6:af:8a:ad:e7:50:
f3:fd:77:b5:a0:c7:cb:f8:00:e2:09:86:c2:f8:47:59:57:8e:
69:7a:e8:18:7d:a0:af:61:41:e0:9d:91:58:7e:91:48:57:05:
68:fc:03:0d:5a:8d:b4:d9:33:47:af:1f:b6:d6:79:aa:29:d9:
ca:f5:49:e0:5e:17:ca:95:6c:ec:52:13:99:f5:1e:1a:ad:c6:
b4:38:b4:b5:d0:3a:b8:d4:3c:a2:62:e9:27:0a:a3:17:e9:99:
d6:ee:a8:1d:3b:dc:7a:9e:56:81:77:12:d8:ee:e3:8e:5d:6c:
cc:7e:d5:29:cb:2b:19:44:21:9b:a4:b0:c0:2e:ab:2d:88:ca:
06:52:d7:57:53:d0:fe:e6:41:36:3e:ac:f4:13:0c:90:17:17:
24:01:1d:97:3a:2d:3e:cb:d2:61:8c:2a:a5:4b:19:1a:ee:fa:
b2:fa:b9:83:88:3f:fe:41:47:db:ce:1f:87:46:1d:7a:1c:ab:
37:24:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:51 2025 by rpki-client