Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File: VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier: 1Hvyig00/1396d0Yc3iZYhtrgsTYGttfYL/QA031c9o=
Subject key identifier: 3A:72:AC:35:9C:FA:DE:D0:6A:9F:F3:C9:EA:16:D0:E2:8E:44:72:D4
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 0196BFDC666DEA9D7EB6CB6106BA939C9147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number: 1424
Signing time: Sun 11 May 2025 15:00:14 +0000
Manifest this update: Sun 11 May 2025 15:00:14 +0000
Manifest next update: Mon 12 May 2025 15:00:14 +0000
Files and hashes: 1: 6a60S-TRqBKotvyyPQBxdiB70Sc.roa (hash: 2NeGJ4f2HswIAojn272Lhr6pkTIi9fGcxUkPl+OU7Uw=)
2: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: ndairFlqBzM2cmvcB0Y8q1Yh5u9axJsIOpDD2T+SwcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:66:6d:ea:9d:7e:b6:cb:61:06:ba:93:9c:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: May 11 15:00:14 2025 GMT
Not After : May 12 15:00:14 2025 GMT
Subject: CN=3a72ac359cfaded06a9ff3c9ea16d0e28e4472d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:3c:7e:4e:cc:b1:a2:40:35:d7:11:71:6d:
7f:28:8e:cd:26:f0:c8:90:57:08:77:d1:9a:ad:93:
49:b7:a6:39:ca:85:00:6b:90:43:c6:a6:52:af:50:
29:3b:f8:bf:51:cb:0b:09:98:00:8a:3e:43:ba:64:
29:32:8c:98:2f:a2:ad:c9:ec:67:ce:8b:48:6c:72:
5b:ae:df:72:47:f9:c4:2c:8b:c0:10:4d:48:4c:0d:
ea:a2:85:36:82:b6:00:92:96:a5:68:ae:4d:9c:c1:
c4:82:c0:9d:49:3c:18:c4:3f:30:b9:72:64:74:57:
7f:bb:d4:5f:fb:84:c7:f5:95:56:49:4f:4c:34:b3:
fa:a1:4f:33:a7:66:27:1e:09:bb:e3:dd:e9:2b:73:
ec:d4:4e:91:3b:9e:5a:a7:ac:4f:ea:f5:52:b9:0f:
c8:2d:ba:a8:6e:94:d9:10:35:03:ec:40:1d:89:8f:
6c:17:f2:78:90:eb:2b:cc:95:55:d0:df:97:6d:0a:
d1:25:03:e7:f3:85:3c:ec:eb:a5:2d:12:1e:ab:c7:
4c:b4:cf:0d:29:ad:a1:a8:5c:d0:5f:99:04:59:4b:
f6:0b:f0:ff:5f:7b:02:d1:28:5b:a8:b6:18:b7:16:
aa:7b:a6:8f:d5:51:72:f8:7e:d3:91:33:8a:d4:36:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:AC:35:9C:FA:DE:D0:6A:9F:F3:C9:EA:16:D0:E2:8E:44:72:D4
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f8:de:4a:f0:09:2f:d0:86:41:43:54:60:fb:3a:b2:79:b3:
b0:33:ba:f0:6a:62:c0:e9:a7:d7:39:f7:2e:c2:1b:b9:1f:26:
10:8a:94:f0:7e:1c:a0:d4:19:30:f5:4c:7a:eb:66:17:cb:f3:
d6:f9:6f:1b:79:2d:b2:69:ec:98:02:b6:7f:69:84:58:82:e4:
0b:e8:26:ae:f8:25:01:50:aa:fe:27:18:18:fa:2c:0b:5f:00:
84:0a:52:f4:95:57:de:37:88:d2:cc:00:33:9d:34:3f:e4:92:
b6:4f:d9:4e:bd:80:6f:a7:14:37:1f:f0:5d:80:82:1a:7d:2c:
22:68:e8:7d:82:8f:d3:d4:8a:64:bf:5f:dc:fe:a8:b3:31:58:
54:36:36:55:22:3e:7d:fd:0e:a5:c6:e0:ee:ef:67:d9:36:41:
1a:4f:53:dc:1d:91:f7:cb:fd:5d:b4:77:45:16:5d:1b:e4:69:
bf:3c:d0:ad:27:05:69:04:1c:d9:9d:53:00:11:1f:55:53:00:
e1:54:84:92:ed:95:eb:50:8e:b0:0f:58:48:17:b3:d7:0b:91:
44:41:bf:be:db:ac:5b:33:0f:8f:63:3d:24:08:12:f6:51:e1:
9d:c4:e2:66:5f:8a:9b:40:47:47:ef:99:28:6f:84:df:49:d0:
11:f0:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:13:15 2025 by rpki-client