Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: fkYPQl57j+bTkT1RCjMmvncpaghrWNQHES4LQT0HrH8=
Subject key identifier: 82:2F:71:A8:E6:33:B6:50:5F:A3:36:6E:97:19:A7:DD:70:18:AD:5F
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 01969E9A943A91AD7BA7C20E86A8BC53E24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 04:00:52 +0000
Manifest this update: Mon 05 May 2025 04:00:52 +0000
Manifest next update: Tue 06 May 2025 04:00:52 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: 1hMmbexrFcJH/gAr0cHe02kHJ9g+w4EapQDIfSipqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:94:3a:91:ad:7b:a7:c2:0e:86:a8:bc:53:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: May 5 04:00:52 2025 GMT
Not After : May 6 04:00:52 2025 GMT
Subject: CN=822f71a8e633b6505fa3366e9719a7dd7018ad5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:d0:39:f4:24:5e:d1:87:4d:45:06:46:1c:
ff:08:fc:9b:fc:a7:d4:a1:db:e8:b1:fe:a1:98:da:
27:4f:73:0a:63:e5:95:53:a7:95:b4:76:0a:43:98:
3e:bc:3d:fc:f7:22:ec:87:74:af:b1:91:f1:8b:9b:
0d:be:41:8b:02:41:ef:78:4e:4f:4c:3e:7a:3b:f1:
b0:f4:85:43:d7:e4:fa:c1:ec:ca:f1:20:5c:96:b3:
31:ac:4b:fe:50:65:75:04:c7:55:30:12:5b:3e:2d:
12:a4:22:fd:66:37:cd:95:43:46:25:a5:93:f5:67:
7a:a8:18:76:98:b2:65:69:22:88:b6:e1:e9:b0:93:
8f:28:81:6c:93:8d:d3:83:5b:26:61:be:8c:f2:d6:
c6:0d:3d:48:69:23:62:7d:21:61:d8:21:2a:c3:7b:
89:33:37:19:d6:fc:00:dc:72:16:ca:39:e1:de:0f:
90:ed:b5:f9:53:8b:ef:47:a7:87:7f:76:ed:18:9a:
ee:00:04:49:49:72:04:e5:f1:75:4d:0d:0a:cf:bb:
c2:43:9c:ba:56:3f:5f:49:71:05:f2:60:03:71:fe:
38:96:1c:0c:a0:a7:b4:a4:48:e3:50:a7:b1:68:28:
f4:90:4c:ef:fc:ef:8c:4c:17:ae:0b:74:de:68:ad:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:71:A8:E6:33:B6:50:5F:A3:36:6E:97:19:A7:DD:70:18:AD:5F
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b2:59:96:b2:2e:e6:0c:15:7d:c2:fc:07:f2:8c:10:5f:f8:
27:9b:5d:f5:11:6c:af:07:9c:d5:c6:33:9e:e3:9a:6a:37:ac:
25:1f:8c:5a:29:52:60:28:6a:06:b5:df:49:a2:56:2b:f2:f8:
14:28:25:9a:f7:4b:0b:c3:c3:de:26:e3:21:31:d3:b4:30:8c:
d6:ff:0b:23:da:5d:eb:df:97:6e:cb:e2:7c:5e:af:14:b8:83:
c9:7f:01:eb:41:07:00:fb:b9:59:89:cd:96:e9:f4:a7:dc:67:
f5:41:75:82:6c:95:fd:b8:86:f9:bb:f6:10:f7:69:86:6f:b2:
c9:6b:0f:77:6f:31:46:b3:4a:d1:bd:7b:fb:1c:02:4e:65:2b:
b1:66:00:65:f6:70:3e:a6:15:22:b4:e6:98:f2:76:cd:c6:3c:
66:75:f1:fb:e7:d8:f1:55:e0:e7:dc:e3:90:75:c3:47:e8:5c:
dc:6a:18:d0:26:92:7c:94:2e:08:16:a4:e9:d2:66:25:bf:2e:
ed:e0:a4:c5:ad:84:e2:fa:73:35:25:5a:11:74:49:48:86:31:
00:1b:d1:65:a0:e5:82:8e:53:d1:7f:e4:a3:26:c7:db:85:00:
79:56:da:20:fb:4b:e3:b7:c1:09:1c:a2:b1:9c:9f:a8:a9:a2:
b0:b0:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:47:28 2025 by rpki-client