Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: PF2Wlkmk4CZFiO1Qsd9Nt6jnuJBZF7oiLJ/iBGMiVgM=
Subject key identifier: 0B:81:C7:3E:BA:56:34:04:A2:65:1A:A9:2B:D7:BA:94:85:CE:08:84
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 0196C5DE86D01C6D5561A9D495BB859137CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0F0C
Signing time: Mon 12 May 2025 19:00:17 +0000
Manifest this update: Mon 12 May 2025 19:00:17 +0000
Manifest next update: Tue 13 May 2025 19:00:17 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: /w69jHRK+xmgfDWZvk09V9JUmGHsUVpJeIW+fAdwwJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:86:d0:1c:6d:55:61:a9:d4:95:bb:85:91:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: May 12 19:00:17 2025 GMT
Not After : May 13 19:00:17 2025 GMT
Subject: CN=0b81c73eba563404a2651aa92bd7ba9485ce0884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:22:45:f3:88:08:b3:52:a3:8c:e8:95:ec:
37:af:3c:26:c2:61:98:fb:d0:dd:a5:1b:a2:fd:2b:
ec:f7:e8:de:09:ff:f8:3a:91:13:ac:29:22:74:34:
92:10:98:b6:d1:78:b6:8f:19:9b:57:c5:ad:bf:10:
81:43:9b:10:c7:71:88:67:4b:5c:3a:e0:be:dd:da:
fa:d7:e0:e8:9e:c2:69:b7:eb:d2:0d:3c:b5:a0:78:
19:55:12:15:aa:bc:95:da:08:db:ae:27:54:be:0c:
ab:5c:83:af:e2:fd:36:66:47:fd:36:65:a4:eb:f3:
c8:f5:bd:56:d3:a5:c8:63:36:1b:72:ee:a2:88:e5:
d3:a0:79:d9:1c:d6:05:02:67:c6:a5:60:04:66:34:
44:2e:4e:e0:53:77:93:2c:c7:1a:1a:cb:6f:9e:e7:
c8:89:a1:41:e0:0b:6a:5f:6b:8a:75:c2:e0:01:8e:
68:c5:88:3e:3c:2e:75:00:1e:83:c2:bf:fe:3b:38:
83:8f:53:d5:12:5c:c4:f4:34:63:ee:37:b2:41:3f:
d9:2a:da:4c:69:1d:10:b8:fe:f6:46:b7:e9:f9:3a:
5b:ef:24:0b:e8:fc:1d:fd:11:cd:29:48:d4:88:33:
42:be:0b:39:6d:c9:a4:b5:b7:03:2d:15:76:23:af:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:C7:3E:BA:56:34:04:A2:65:1A:A9:2B:D7:BA:94:85:CE:08:84
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:04:c0:4c:cf:8f:bb:cc:11:a2:d1:14:3e:47:06:58:9e:57:
ee:b6:93:4a:7b:29:cd:19:a5:83:55:49:f5:83:23:77:78:48:
00:00:d7:2a:53:47:a6:a0:c1:a0:d9:34:bd:87:d6:0a:6d:1c:
d1:84:c8:16:5e:39:d9:9e:9b:77:8c:bf:ee:cc:e3:cb:02:1e:
9f:0a:23:34:57:d7:ad:e0:f2:97:79:a3:a4:d2:02:0c:f6:4a:
c6:c4:7c:9b:90:ca:fc:8c:ee:72:95:a7:5b:c6:06:3d:f8:20:
12:95:f5:d6:95:2c:d6:79:6f:72:f8:95:14:b4:6c:2a:3c:fa:
94:e4:a5:d6:57:0a:cc:18:e5:52:67:68:96:a3:f5:e3:13:5b:
6d:79:e1:f8:04:96:ce:fc:bc:6c:16:81:0b:03:e0:15:ab:7f:
ab:56:9e:e6:72:fc:e1:66:47:6a:47:da:36:5e:10:8a:82:e8:
4a:dc:c4:6b:22:3f:61:b0:73:43:6e:77:77:0f:cd:d3:9e:e8:
69:e9:cc:de:3e:54:6c:fa:8c:fd:6d:78:05:03:26:f4:d6:48:
1a:9d:53:72:bd:ae:e7:ff:27:d6:a5:f5:47:00:38:b4:7d:5f:
c7:e6:59:c7:d1:6f:5a:e4:a9:ef:a5:fd:39:8c:40:a4:36:af:
dc:ab:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:08:07 2025 by rpki-client