Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: v/7r5pjkbvdM04TaBcEKqw2+rZSpmgUYNdvbeKUz7ws=
Subject key identifier: 69:C3:28:DF:7F:AD:EE:B4:7D:8A:62:29:BC:8F:BF:B8:97:A7:E1:B5
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0196BDEE55E0D675F71EF3533F0CBEC5509A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 06:00:35 +0000
Manifest this update: Sun 11 May 2025 06:00:35 +0000
Manifest next update: Mon 12 May 2025 06:00:35 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: q4ZbGoQSGUbbhxKdKFh835UKtUqTfP1e2ktxYhPIoNk=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:55:e0:d6:75:f7:1e:f3:53:3f:0c:be:c5:50:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: May 11 06:00:35 2025 GMT
Not After : May 12 06:00:35 2025 GMT
Subject: CN=69c328df7fadeeb47d8a6229bc8fbfb897a7e1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:b3:2a:af:87:b2:1d:b6:ce:98:b4:d7:00:
a3:92:ef:98:38:90:02:40:80:cd:40:5b:d8:2a:b4:
43:ff:d5:b6:c1:7f:e0:28:49:33:27:23:e0:01:8e:
60:c3:51:2c:9b:9d:c0:e9:7d:9b:1c:30:9a:b5:cc:
cf:66:b4:cf:26:d6:4b:ad:74:3a:2b:fd:b6:43:dd:
0c:a8:73:45:fe:8d:88:73:f5:5b:21:60:66:54:4e:
12:c2:31:fe:a2:38:2d:ee:52:07:5c:7a:9a:e3:a7:
d4:ff:c2:ca:81:5f:30:36:ac:aa:58:34:09:28:39:
11:d9:2a:ee:f9:ff:84:f7:b8:95:a8:e2:68:bd:46:
47:e4:35:72:80:b0:b7:4f:7f:02:a5:81:bd:cc:32:
b9:7c:9d:72:af:8f:08:7b:19:ea:b7:3b:ef:8b:45:
e6:1a:f0:20:dc:0a:e6:b9:5d:89:89:72:d5:af:a4:
ee:28:b2:fb:04:2c:1f:07:59:27:88:8b:f7:89:c0:
58:0e:f6:f8:f0:3a:5a:21:3e:c7:e8:2f:f8:51:c2:
6d:66:03:64:18:30:e8:06:fc:63:f8:7c:91:00:c8:
3e:6d:8a:75:e3:65:74:93:1b:ab:f3:38:24:c5:45:
c9:78:2a:03:e5:33:5c:83:95:63:bf:46:04:c8:83:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:28:DF:7F:AD:EE:B4:7D:8A:62:29:BC:8F:BF:B8:97:A7:E1:B5
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:fc:0c:aa:ba:57:df:f5:6d:44:f7:f9:b3:e6:b2:e7:c6:
8a:ca:7e:1a:53:ff:36:7f:81:47:96:cd:e3:10:01:26:3e:03:
e8:10:94:c6:3d:e8:9a:ba:ef:4f:e1:d5:63:ea:6a:e8:2f:d0:
7d:5c:5a:20:f7:f9:04:06:27:3b:c9:e2:6e:c8:7f:52:33:49:
f6:e3:15:6a:fc:ff:ac:41:0e:78:cc:3b:4c:ac:9e:20:49:8d:
f6:f4:0a:00:cc:8c:d6:8f:b9:69:41:24:bb:b3:27:73:f3:af:
9b:d6:8b:fc:d7:14:c8:94:b3:32:21:33:bb:98:01:11:66:b3:
c8:d4:ee:2f:ac:d3:12:29:19:ab:fb:cb:74:e2:a0:7c:f7:a2:
d8:12:1d:1a:ac:fa:8b:9b:a8:ea:eb:b4:6f:1e:63:d1:5b:7a:
70:d5:3f:39:fd:f1:3f:f1:79:5b:ae:b7:2a:fd:df:25:83:de:
16:2b:01:6b:6f:15:53:ea:d5:8a:7f:07:57:c0:ba:be:81:3e:
5f:37:2f:70:fa:37:9f:3e:c2:da:a0:11:3d:de:b3:b4:96:f4:
ce:81:a1:9e:e9:28:29:84:1a:34:7c:5d:7b:02:7c:eb:cb:d8:
60:21:94:bb:d8:0e:a6:d4:74:65:ac:d1:ca:2d:08:91:70:a2:
ae:66:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:37:11 2025 by rpki-client