Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: Sg4hkLow0MEqbmu8f6OTrVxUFjz6fdvo6nkbU9quaHo=
Subject key identifier: 12:B3:64:E6:DA:5D:BD:91:64:74:62:6A:CA:3C:AB:75:5B:EA:6A:77
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 0196A164482B3512877CBC6F3D2BDE1B8E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 11F7
Signing time: Mon 05 May 2025 17:00:25 +0000
Manifest this update: Mon 05 May 2025 17:00:25 +0000
Manifest next update: Tue 06 May 2025 17:00:25 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: CjIaAevHv2opwq2n2sd5UTkahG143vf6thLijM8BmGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:48:2b:35:12:87:7c:bc:6f:3d:2b:de:1b:8e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: May 5 17:00:25 2025 GMT
Not After : May 6 17:00:25 2025 GMT
Subject: CN=12b364e6da5dbd916474626aca3cab755bea6a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:48:38:83:5a:f2:6f:3f:69:8a:bb:6e:d8:
90:6f:af:63:29:15:df:8d:f5:db:2b:a3:01:44:84:
4c:7c:94:b0:87:69:99:3e:49:a5:fa:d4:94:b7:e2:
62:51:38:27:61:67:84:91:40:fe:48:2a:00:5e:3e:
f3:23:4c:2b:53:03:73:7b:43:eb:c0:cf:aa:ed:03:
3f:c3:b6:75:44:a8:6a:f8:78:2c:95:19:e4:c2:f4:
50:6d:68:cd:05:bf:11:e6:d2:b8:70:3d:bc:ee:cf:
e4:af:a0:c7:0c:c5:ea:5b:dc:6e:8b:8b:f3:7b:6c:
64:f7:fa:b4:d2:1b:d2:c0:c7:0d:2f:ea:98:5e:e1:
1b:db:e4:8a:ab:b0:15:ca:fe:55:87:44:09:4d:fb:
15:f6:c9:ef:72:ce:f7:91:ec:d2:b1:e6:8f:93:85:
1e:05:93:40:2f:bd:4d:14:70:9a:07:21:ea:2e:f8:
74:fa:4c:56:39:8f:8d:c4:7f:10:cc:8a:cc:57:26:
48:5a:e8:d2:ea:d0:4b:67:db:3a:18:84:53:73:7c:
92:9d:42:a7:9f:88:73:37:33:8d:36:7c:88:31:3c:
f3:6b:36:bc:d6:e3:9d:6f:7b:b0:06:4e:13:d0:43:
99:c7:a0:93:54:a9:fb:4c:99:15:f1:49:d2:66:19:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:64:E6:DA:5D:BD:91:64:74:62:6A:CA:3C:AB:75:5B:EA:6A:77
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:e0:e6:88:7a:f1:2a:8b:b9:e1:be:b2:b1:bf:f9:1c:38:
d1:df:80:30:93:ea:e1:c2:d3:0a:8b:e3:8a:9d:4c:a0:82:eb:
75:66:9f:d0:dc:8e:c1:ba:98:0a:0a:bd:17:45:74:82:07:8e:
0c:88:e0:da:f4:de:ef:10:19:84:7c:83:5d:68:2d:f6:29:16:
60:28:db:bb:57:a7:f5:22:3d:c2:01:62:ae:3c:2c:e9:05:96:
a6:7b:63:c2:81:b1:b8:47:5d:08:71:75:64:8a:46:89:82:85:
0e:76:99:82:f7:fe:16:7e:79:ff:82:ca:24:73:dc:9b:77:18:
8a:e5:e2:67:a0:b5:76:3d:1a:bb:29:65:7a:4e:cc:dc:93:8b:
62:7a:0a:70:78:c8:f6:e1:ff:dd:c6:d8:9a:1f:ea:27:5b:ee:
d4:0d:f0:cd:a0:ca:75:84:05:5c:65:66:ee:67:2f:4b:ef:fa:
d8:bc:79:30:a3:da:8d:7f:f1:27:b6:e4:ee:a9:98:b4:f8:96:
2c:6f:d4:6b:7b:56:21:97:9c:38:6f:c9:d8:fd:0f:ab:d4:0f:
d4:11:5c:2a:24:b6:15:ce:48:51:37:32:75:ad:d1:65:0d:b9:
40:14:ff:98:a3:0d:f5:0b:4b:7d:cc:4a:5e:2a:89:0a:90:8d:
c7:02:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:14 2025 by rpki-client