Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: dC1iFFJ9/kRQ4OK0q+QUShobxAVZUWlpCw7ftuaFgQ0=
Subject key identifier: BC:21:68:48:4E:6F:8F:1C:D9:1D:9B:A9:A3:59:67:81:56:1F:96:72
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0196CB3BC07804B76AD790B81DFA180E189A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0A87
Signing time: Tue 13 May 2025 20:00:12 +0000
Manifest this update: Tue 13 May 2025 20:00:12 +0000
Manifest next update: Wed 14 May 2025 20:00:12 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: nvtUH/XW8bJLbe+mBkqpcHnNC42KSEUp/yRPHq9ssnE=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:c0:78:04:b7:6a:d7:90:b8:1d:fa:18:0e:18:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: May 13 20:00:12 2025 GMT
Not After : May 14 20:00:12 2025 GMT
Subject: CN=bc2168484e6f8f1cd91d9ba9a3596781561f9672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:36:23:6c:cb:a3:ca:35:42:b3:b0:f5:b6:
ac:0a:be:a2:3e:d2:3b:0d:2a:65:29:7b:fe:c7:cf:
97:68:7f:65:ba:ad:9d:da:34:a5:68:f4:ef:18:f1:
fa:cf:01:7c:1f:65:f4:92:3d:1f:d1:67:75:2c:52:
07:54:75:5f:b3:e4:78:d7:24:d2:b5:e8:b8:ce:2c:
ba:03:04:75:32:75:ec:8f:4e:da:ec:d5:07:6f:8c:
1a:e0:32:db:a1:27:e4:18:a6:57:76:23:d7:ea:48:
b4:c8:dd:e3:b0:63:7f:ca:a2:1d:75:97:98:f8:e6:
fa:05:92:0f:b4:3c:41:fa:0b:6a:2a:0b:76:97:9b:
25:f0:f7:af:11:cf:75:aa:fc:48:56:4d:61:12:ce:
a4:52:fd:e4:1e:46:c8:95:2c:61:ad:e9:a0:4a:58:
2e:6f:22:17:0d:42:35:02:1b:d6:4b:7c:7d:9c:82:
b2:b5:d4:3b:bd:63:6b:da:3a:06:7a:b3:85:c8:bd:
d4:28:79:93:fd:b7:f5:53:f0:10:39:f1:61:eb:3b:
22:6b:93:da:a0:ef:20:7f:96:50:77:ef:29:84:c7:
cc:a6:c8:ac:6a:81:ea:4f:d6:45:e6:8e:fd:8b:d9:
21:15:2f:ea:3e:9c:13:74:aa:c5:00:1a:8c:ac:55:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:68:48:4E:6F:8F:1C:D9:1D:9B:A9:A3:59:67:81:56:1F:96:72
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:55:4f:22:bb:6f:0f:7c:e4:24:76:71:98:56:87:ad:ae:48:
14:e2:d9:44:18:66:88:4f:33:a9:55:55:3d:f7:af:37:6b:0c:
f9:99:4b:7e:e4:3f:f3:74:a8:ab:44:70:61:96:b5:14:08:c6:
fb:43:02:00:24:35:48:92:7f:10:d4:78:6d:ab:85:5d:ae:7f:
42:3f:69:f8:56:c8:49:35:f4:35:12:6c:d9:78:6b:39:6f:f6:
5b:6f:44:73:42:e7:3e:c8:98:0d:d9:5c:e3:ab:01:2f:11:f2:
3b:c2:70:42:55:da:c6:ef:87:b2:d6:1e:38:19:15:17:32:53:
12:94:af:e7:bc:93:92:17:2e:9d:84:ff:5a:32:48:6f:a2:b2:
82:99:cb:ca:27:10:6f:9c:74:1b:59:98:75:4d:f1:b2:33:62:
1a:a4:75:93:6a:88:cf:22:21:56:77:c6:68:67:93:73:3c:6a:
e3:65:fe:de:23:14:73:c2:92:78:83:0b:02:6e:dc:47:3c:36:
8e:c3:ce:1a:b7:1a:08:8a:16:61:4c:68:63:21:09:d1:93:12:
b9:f6:70:82:1e:f5:9d:99:8b:ef:78:ee:70:67:f1:33:24:99:
89:e2:02:95:e3:4d:8f:fa:0c:34:99:a8:d0:0a:92:bd:0e:44:
6d:a0:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:59:39 2025 by rpki-client