Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: 4w8iocbmQQhK2Kbg4K1kxyPlvlZY13vjWn4WwaM5ppo=
Subject key identifier: 9C:23:5C:BC:69:73:40:44:2F:58:38:55:7D:73:34:D8:38:CE:C3:03
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01967868E5B77C37FBF9CF20116CDD11C1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 085D
Signing time: Sun 27 Apr 2025 18:01:02 +0000
Manifest this update: Sun 27 Apr 2025 18:01:02 +0000
Manifest next update: Mon 28 Apr 2025 18:01:02 +0000
Files and hashes: 1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: jIT0EVwelzUS533r/updiYo9nHF2Smufx6BzVB8uz+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e5:b7:7c:37:fb:f9:cf:20:11:6c:dd:11:c1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Apr 27 18:01:02 2025 GMT
Not After : Apr 28 18:01:02 2025 GMT
Subject: CN=9c235cbc697340442f5838557d7334d838cec303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:4c:b8:8c:ad:c6:75:5e:21:92:13:6f:d5:
66:a8:d2:08:2a:9c:be:02:9f:12:14:57:fd:0a:5b:
66:1c:f7:60:ef:44:57:e9:ca:34:16:04:80:26:9e:
0d:39:bf:43:c9:b4:12:85:bc:af:4f:67:9b:6c:89:
09:ee:50:43:b5:89:44:82:7f:c0:01:87:a1:d3:7a:
fa:10:75:51:58:6f:d6:9f:0f:fc:3e:38:8f:4d:4a:
cc:f8:7a:c1:6a:0e:11:95:11:e7:5c:a9:6d:f5:94:
f7:22:70:f8:8f:f9:ef:5a:b8:9b:06:16:ae:c2:51:
31:56:40:83:b0:9a:35:14:26:9e:ba:d6:33:3d:b2:
b1:56:ef:3d:49:b9:27:64:d7:f4:0b:15:78:62:58:
bf:e6:5b:c9:0d:15:86:01:20:f3:b7:19:50:cc:17:
aa:ec:f9:3a:4d:c7:79:95:e3:cb:05:dd:2d:28:b9:
c2:44:4a:9b:bc:09:ae:2e:2c:cd:69:44:49:36:3c:
bc:e8:34:93:b6:d4:dc:8a:d3:23:a7:c3:41:12:9a:
e4:e2:75:1f:0f:25:ba:b3:4c:78:4f:f2:1c:6a:8c:
55:53:8a:2d:1d:f9:87:2f:b0:2f:c5:b4:6a:7c:88:
5e:39:13:4b:ca:70:c4:eb:b1:38:e3:01:b4:dc:10:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:5C:BC:69:73:40:44:2F:58:38:55:7D:73:34:D8:38:CE:C3:03
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ad:b5:22:00:d2:69:08:14:44:60:26:bb:89:a9:44:a3:54:
68:b2:1f:22:dd:6a:e3:56:b2:ec:6a:60:48:8b:88:49:bf:44:
49:1c:54:95:2e:2d:fe:9a:96:11:45:9f:b0:1b:e7:dd:41:14:
5a:91:4e:ca:f3:ce:8e:67:dd:71:40:3d:2d:73:d2:69:ff:1c:
3a:61:af:78:77:3c:49:4a:a8:ab:8e:16:3a:16:ad:20:a8:d8:
7b:24:6b:22:d2:c6:e8:e8:9b:51:39:ec:06:5e:8c:2c:22:db:
3f:87:95:b5:93:e5:c2:52:e1:f5:f8:e4:9d:16:43:5a:55:29:
e6:a6:65:e2:26:58:73:af:b8:40:65:83:d9:80:fe:1d:72:af:
fd:24:73:35:20:c3:d1:2f:4c:b9:6b:6e:42:57:c5:67:e3:f3:
1f:39:63:31:ec:82:6b:40:df:ef:24:dc:51:aa:5c:87:49:10:
94:e0:4d:58:ed:c2:da:f9:e4:61:93:8d:6e:ab:31:49:bc:9a:
e5:2b:a2:f7:ee:b5:5b:f8:16:fe:55:87:cd:11:ff:50:62:74:
99:4c:25:e7:71:e7:dd:30:e3:86:cc:f5:04:3a:f1:5f:cc:13:
b5:14:1e:0b:f7:71:eb:7c:18:76:8d:a6:96:c2:84:29:e6:c5:
a5:e2:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:14:45 2025 by rpki-client