Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: ts/WQ3Bs2xzpV/Nl3fxGwnq9t5SPq02YP3gEx65E3YE=
Subject key identifier: 49:E1:34:F1:13:75:1B:FA:ED:BC:03:00:60:3F:9B:D4:C4:2E:94:8B
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 0196A352CAFFF8F68F804C21B28D3DCF18B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 02:00:34 +0000
Manifest this update: Tue 06 May 2025 02:00:34 +0000
Manifest next update: Wed 07 May 2025 02:00:34 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: ONua6njQS0OtTyUpzO/aakSmqEeK4GkUFnYSkS2SqBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:ca:ff:f8:f6:8f:80:4c:21:b2:8d:3d:cf:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: May 6 02:00:34 2025 GMT
Not After : May 7 02:00:34 2025 GMT
Subject: CN=49e134f113751bfaedbc0300603f9bd4c42e948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:53:6b:1e:29:4b:67:ba:38:00:ea:3b:aa:
b6:5e:93:af:6b:6f:3b:69:b4:c1:b6:f7:c0:f2:13:
67:71:9f:91:22:2b:67:fa:b5:fa:f6:a6:d2:e4:45:
d4:6c:d3:35:e9:23:aa:5c:48:29:bd:e0:b6:6e:01:
35:23:f4:27:b7:90:8b:a1:35:79:82:d0:38:1e:98:
8a:af:f9:15:f9:c4:af:f0:0b:6b:b9:ac:1a:c6:83:
a6:09:34:18:86:61:a9:23:b3:32:d2:26:17:f5:a0:
8f:97:93:e0:bf:85:96:d5:0f:91:2b:eb:13:3d:66:
e1:f5:df:7e:9a:d6:8a:78:c7:01:87:46:5c:a3:d9:
5e:ce:a8:60:94:22:89:53:b6:b0:de:49:6e:67:9b:
bb:5b:89:5a:2b:ce:62:82:99:5e:0b:40:f9:4e:ef:
ef:53:c6:33:43:46:5d:b7:f4:34:c9:7c:b4:55:de:
c5:41:70:b3:40:ba:55:c9:91:d1:ba:a5:aa:47:1b:
cd:fd:c0:6c:9f:ba:97:bf:d5:d5:0b:18:21:e4:11:
7d:60:9c:14:68:b1:38:dc:a6:c8:c4:fc:0f:3e:ea:
6f:e0:22:34:6b:4e:44:8c:2c:ed:55:9b:48:d0:51:
05:ea:50:d2:d6:28:68:e2:5c:27:82:7d:6e:d6:fb:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:34:F1:13:75:1B:FA:ED:BC:03:00:60:3F:9B:D4:C4:2E:94:8B
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ff:78:1c:79:83:f3:3b:dd:5d:cf:be:ad:56:02:1d:5b:fb:
bf:17:8d:49:30:e4:c8:82:89:cf:19:07:6a:c8:e0:bc:ec:11:
40:d0:67:0e:3b:f0:c6:38:88:4c:58:38:64:b9:1e:6b:d5:4a:
c0:7d:b5:ae:7d:fd:55:e1:05:07:2a:6f:6b:0b:39:0e:b9:88:
99:a1:25:4e:95:6f:3b:6d:44:4f:b9:66:d1:cc:33:c6:30:6b:
f0:3a:3a:99:31:cb:df:ca:5f:0c:09:48:2c:d2:c5:db:0e:e0:
1c:4b:c3:7e:f9:0a:1f:5b:aa:f8:36:83:c2:44:86:e7:e0:1e:
dd:7e:d2:93:2d:66:1d:88:e3:fe:46:5a:93:92:b3:66:24:8f:
a3:34:a4:e2:d1:ff:81:e3:12:4e:02:60:9d:f6:db:39:2a:0c:
b0:93:7f:f8:54:6a:e3:29:6e:fa:cb:bc:9e:6e:9d:b9:b2:53:
f3:12:6b:af:46:4c:96:71:e7:b9:98:e6:a6:0a:db:1e:da:51:
65:4b:ad:b5:51:04:a8:e6:18:a4:ff:fe:ec:d7:96:fd:06:ee:
76:a6:45:05:1b:e8:79:99:88:43:e9:28:c5:7b:22:dc:c0:c8:
be:ff:d9:21:4e:cd:43:38:b0:55:dc:7c:72:70:f3:3f:80:47:
b1:46:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:36:40 2025 by rpki-client