Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: LfEmW2fhPs4XVRJMbkCE/iPlRYjvqsL9GnSqDTfn0Ro=
Subject key identifier: 32:53:BA:40:0F:42:AB:0C:B8:32:67:96:D6:1D:38:E7:7A:51:11:73
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 0196B4B45193115BC3AD45AFCCAEA0B65917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 11:00:38 +0000
Manifest this update: Fri 09 May 2025 11:00:38 +0000
Manifest next update: Sat 10 May 2025 11:00:38 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: dTbDvb5FCELcrrDN+RgFITqD5uIPilFTvLsXXn9csXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:51:93:11:5b:c3:ad:45:af:cc:ae:a0:b6:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: May 9 11:00:38 2025 GMT
Not After : May 10 11:00:38 2025 GMT
Subject: CN=3253ba400f42ab0cb8326796d61d38e77a511173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:cb:9d:c2:e3:02:19:15:05:41:42:05:d8:
87:b0:2f:df:3d:06:a0:3c:16:a1:94:20:0e:ea:77:
22:00:37:64:e8:9e:e5:8d:c3:2f:de:53:6d:99:6e:
4e:af:0c:b2:c2:91:e9:45:5a:81:2b:29:41:71:f1:
a2:0b:33:cb:e6:e6:d8:8c:e7:0f:de:56:9e:f7:f4:
31:05:2e:0e:61:36:2f:18:32:4b:fd:8a:f5:49:97:
8c:42:de:72:f1:b7:fb:0d:11:5b:4d:fd:27:6c:76:
88:03:86:96:2e:19:be:48:2d:58:7d:8a:36:0a:09:
ef:7d:70:91:c3:e9:d5:73:99:86:34:f0:5b:42:15:
46:0f:54:b0:75:fa:f9:45:ff:78:c3:42:cc:73:85:
d3:00:5f:de:8b:56:de:db:cd:74:42:a6:3f:e8:c2:
b1:9c:33:e9:b6:56:8c:f4:b8:a3:1a:4a:ef:65:8e:
3a:cf:7f:fe:3f:aa:c6:b2:3e:c0:3f:6c:6f:f6:b7:
ae:a3:0e:ec:ce:5c:ad:9e:15:68:ee:ec:02:9f:77:
3e:ec:8c:21:01:a6:63:36:2c:dc:af:78:27:53:c3:
66:33:b6:fe:fe:71:c6:4d:0d:8a:77:69:32:fd:d5:
77:52:fd:37:c5:2d:c7:49:6a:a7:7f:4b:2c:b8:b4:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:BA:40:0F:42:AB:0C:B8:32:67:96:D6:1D:38:E7:7A:51:11:73
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:a1:6e:c1:d0:84:47:d1:3c:41:83:6d:e0:7d:2c:7a:81:
51:b9:a3:7e:e3:4b:cb:0e:92:cd:4b:9f:51:58:ec:6d:38:f8:
e7:7d:7c:e8:d7:0f:0b:45:0b:9e:d7:ad:92:0b:00:f8:d9:38:
12:8e:6a:3c:c3:c4:af:b1:81:a4:db:e3:28:5f:a8:31:e3:c2:
5e:eb:52:9f:f8:b8:08:34:b4:a7:64:ce:0c:a6:e5:01:f6:35:
c1:c1:8c:2e:bf:20:9a:ca:37:73:e0:66:0c:32:a5:dd:91:79:
85:4d:3b:ba:79:aa:e1:90:91:d2:de:fe:dc:0e:55:b3:8c:9c:
df:c0:68:11:60:5f:c6:e0:60:4f:86:00:c2:5c:b7:fc:38:cc:
c3:e7:ef:dd:e8:d7:bb:81:0c:c4:48:ae:fd:b5:a6:17:ad:27:
d2:93:7f:c4:21:26:58:a9:ea:e7:23:13:63:88:d1:6e:0d:78:
3e:65:8a:eb:d1:de:2d:ec:61:71:a7:93:9c:d6:7a:75:75:40:
e0:a4:ad:76:ad:c7:8c:52:98:e7:29:39:b7:73:37:03:65:c9:
fd:ac:ea:78:e3:71:6f:83:15:a6:11:d1:53:97:f1:25:2b:b0:
5d:48:9c:90:9a:4d:28:fa:bf:3d:0d:a8:73:f1:88:b4:d3:1f:
d5:f4:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:37:05 2025 by rpki-client