Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: zvia/z1HOTJ7VhbqvH2JgSs7LHP+eoZUiXerQVfmx0s=
Subject key identifier: 76:5C:2A:3D:2A:37:A3:ED:19:E1:82:57:19:39:06:E6:F6:E1:9F:17
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0196BE92C1423779399316BF09C6ED76CEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 09:00:10 +0000
Manifest this update: Sun 11 May 2025 09:00:10 +0000
Manifest next update: Mon 12 May 2025 09:00:10 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: vqdgmYttczR5lrnNcgE8C3AFVj6VeTzMFpYXTsVjmfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:c1:42:37:79:39:93:16:bf:09:c6:ed:76:ce:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: May 11 09:00:10 2025 GMT
Not After : May 12 09:00:10 2025 GMT
Subject: CN=765c2a3d2a37a3ed19e18257193906e6f6e19f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:cb:be:71:7e:c4:7f:61:10:71:0d:93:ba:
c6:d0:db:e3:01:12:4d:38:19:c1:23:8e:e7:7b:5a:
1f:ba:a3:80:0d:c4:c0:ff:b8:25:f3:cd:64:25:bf:
12:aa:ad:e2:f9:99:6b:8c:06:07:a9:e1:38:59:c7:
a1:f7:ab:9b:ed:9f:8a:dc:9c:ba:07:6b:13:37:34:
11:ac:c0:6b:97:88:fa:f4:49:67:2b:83:15:2a:0f:
45:7c:9a:78:09:0e:f6:32:45:19:b9:2f:85:b3:57:
5f:35:e0:3c:34:66:3c:ac:7c:36:df:48:37:93:bd:
72:1a:74:f3:d6:a2:17:3c:88:44:fc:ce:2f:5b:95:
c2:4e:75:23:cb:d3:b8:a5:da:2e:0b:75:95:90:1c:
ac:36:9a:db:5f:5e:11:13:b2:b1:4e:00:8c:b8:59:
7e:62:4f:76:2f:ca:9c:99:75:48:0b:3d:85:af:bb:
21:94:b8:41:08:9f:5b:2a:b1:3f:2c:c7:89:4f:22:
29:bf:25:d9:fc:5f:58:69:5f:aa:d9:0b:cf:41:b8:
ff:26:22:b3:11:86:a3:0a:d8:6e:cd:f8:8a:1a:95:
a8:02:64:82:ff:a7:68:f2:20:82:00:b9:36:46:15:
d7:31:02:83:e8:aa:09:a8:3f:87:b2:55:d4:e7:08:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5C:2A:3D:2A:37:A3:ED:19:E1:82:57:19:39:06:E6:F6:E1:9F:17
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:d7:a2:28:6d:ce:1a:6a:82:cb:3a:a3:eb:3a:ae:b2:d8:
df:26:87:7c:89:e8:0e:1e:f3:4a:a2:71:f3:33:85:39:4a:c0:
84:0c:ab:b4:2f:25:12:7d:b6:9e:db:1c:7a:e9:e7:bf:21:50:
76:e9:02:49:a7:fb:1e:6a:0a:81:59:94:ca:07:ba:d6:a1:03:
b3:2d:39:c9:6e:94:3b:db:a0:f5:35:5e:50:3f:57:5b:a7:51:
a4:6e:08:64:4a:82:c0:45:03:0f:6e:61:9c:b4:14:42:fa:42:
9f:86:f4:54:c7:84:22:66:2b:a1:85:c4:a4:06:4f:23:9f:ea:
1c:1e:99:59:d4:76:28:bf:e5:06:ed:ee:01:a4:bb:3b:6f:1f:
7e:50:d0:40:d9:0b:86:eb:d7:7c:a1:2c:8f:46:7c:a4:3b:50:
8f:78:ec:0b:00:57:80:31:60:fd:c2:87:b5:8a:08:ec:7c:0a:
7f:ae:6a:2f:2c:48:34:4a:05:91:c3:d8:4b:13:62:8e:11:9e:
63:d3:8f:cd:4f:23:7f:0f:3c:29:43:8d:fd:c1:6f:84:9c:6c:
8a:26:22:3f:34:fd:18:44:4c:5f:9f:60:a9:1f:49:6d:2a:37:
ff:65:bf:01:95:40:6f:7e:42:d1:86:fa:4d:b7:46:f9:dd:a1:
57:3b:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:57:04 2025 by rpki-client