Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: EioYlblADM6gfh5Mh+LVvB543UiOBD/nndaGBXVotPE=
Subject key identifier: 0A:14:BE:49:A2:9D:41:95:B2:66:C0:D6:FE:A1:5A:93:D1:B4:B5:22
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 0196BCDBA01E32E01CB3775F89E7F2CF96C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 14C4
Signing time: Sun 11 May 2025 01:00:31 +0000
Manifest this update: Sun 11 May 2025 01:00:31 +0000
Manifest next update: Mon 12 May 2025 01:00:31 +0000
Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: dInkT0cnLh7e9ib5bs+cUnDHHW152ikIQMUWhLdWjH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:a0:1e:32:e0:1c:b3:77:5f:89:e7:f2:cf:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: May 11 01:00:31 2025 GMT
Not After : May 12 01:00:31 2025 GMT
Subject: CN=0a14be49a29d4195b266c0d6fea15a93d1b4b522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:5a:33:ff:29:25:38:58:0a:f6:0a:af:03:
68:99:f6:74:9a:9a:5c:2d:97:9d:49:66:1b:da:e0:
fe:50:d9:b6:67:6b:d9:72:d1:63:f8:06:40:18:30:
ef:65:16:0d:7a:14:fc:4c:94:52:cc:da:0e:1f:7a:
94:81:a9:6b:02:22:94:e9:fa:d4:ae:d0:d0:b3:d9:
91:c8:c8:1b:4a:ac:0d:04:78:db:f9:b1:fb:47:14:
6f:04:e1:b8:1b:d0:35:2d:b6:49:f4:08:45:38:91:
bb:89:1a:6d:56:77:2b:ec:7d:8b:08:92:a4:01:98:
aa:ea:14:a8:00:b8:44:32:54:0a:9d:5e:2d:b1:5e:
19:20:36:03:12:93:69:de:33:ff:ea:d6:48:df:5f:
49:e7:17:70:7c:23:7b:a8:5a:2f:20:db:41:02:a0:
57:f6:9e:f9:f8:13:37:4c:9d:9e:bc:74:2e:68:61:
d3:01:44:f9:77:f1:bb:55:50:b9:66:80:2a:f4:4a:
7b:cf:34:11:5a:23:81:eb:99:7d:a4:75:97:22:b3:
60:6d:db:bb:cf:f6:8c:04:7c:dd:8a:5e:3d:3f:99:
d6:9c:05:ab:78:c6:2f:67:e2:8d:33:3a:f3:bd:d2:
fc:43:74:7f:b9:ac:b1:97:f4:21:d5:37:7d:99:11:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:BE:49:A2:9D:41:95:B2:66:C0:D6:FE:A1:5A:93:D1:B4:B5:22
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:11:0c:af:86:da:a6:2c:5b:d6:40:b6:e7:df:7f:02:b4:25:
8e:57:b2:8d:65:bd:ac:68:cb:81:87:65:43:ea:e9:4e:08:b1:
86:6f:73:c2:df:26:46:d8:9c:47:51:3c:86:ff:54:19:7f:49:
d1:f1:d4:1c:b7:a0:34:0f:fc:2c:32:6b:33:a2:53:f4:2e:e2:
88:7f:8a:de:03:b0:ad:62:6b:86:31:72:4d:6d:42:86:2b:63:
fc:fb:6e:3c:aa:33:ab:43:5a:cc:9f:50:59:58:f7:bc:16:31:
d3:7f:63:cd:60:7b:36:61:52:f6:4e:23:43:06:ad:73:09:a8:
ca:00:1e:94:3f:09:ba:83:ab:a4:ac:1e:15:69:1a:83:7b:64:
31:ce:89:84:b0:70:08:71:f7:1b:b1:c7:22:09:df:95:10:3d:
31:e0:71:22:2e:37:b7:21:2b:c1:3c:fb:49:d9:10:08:cc:6d:
03:d3:92:52:3e:73:e4:fc:04:c3:64:71:a8:f7:03:5c:5b:8d:
3b:8f:ab:58:ad:41:74:69:f8:da:ed:a1:d9:77:e4:61:f0:02:
e6:24:b7:aa:50:b6:5d:bd:a4:2f:16:58:09:59:12:52:ad:24:
0a:e0:49:04:ec:27:c3:9b:b5:b2:e1:14:dc:91:bf:8f:24:e7:
69:0e:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:42:13 2025 by rpki-client