Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: qeqL7UnWP8NwKshEX9rduIiu/VXnbG+YMK24tcE0IVo=
Subject key identifier: 36:B3:E8:7D:CA:4E:BB:51:1E:33:7C:FE:87:A5:BD:B2:43:6D:30:18
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0196C94D9D09542C8B527A055C114C2BB33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 127F
Signing time: Tue 13 May 2025 11:00:28 +0000
Manifest this update: Tue 13 May 2025 11:00:28 +0000
Manifest next update: Wed 14 May 2025 11:00:28 +0000
Files and hashes: 1: IJsuPHEjRD5U3Gv14sc7K0m3CaI.roa (hash: 9xaSijx/J+UcS287yiWqygtaW2+asOVi313BpTLMGG0=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: ig62+A0BLuYxZjGahS6nIBFW+4IGP+h+8Gne/DuiB2U=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:9d:09:54:2c:8b:52:7a:05:5c:11:4c:2b:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: May 13 11:00:28 2025 GMT
Not After : May 14 11:00:28 2025 GMT
Subject: CN=36b3e87dca4ebb511e337cfe87a5bdb2436d3018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:02:f4:2d:af:9e:d8:ee:64:b0:75:87:fa:
e4:f5:cb:3a:06:78:b6:2e:3c:cc:b0:03:3a:49:57:
72:f0:1a:55:01:e5:d8:14:82:d9:5a:71:42:24:d1:
8c:23:44:dc:b0:3e:da:37:28:ef:87:2c:d4:e0:ab:
b0:5d:73:80:43:95:25:26:3a:82:e4:dc:32:57:fb:
5d:8b:59:ad:5a:4c:24:28:7f:65:4e:7a:ac:0d:97:
ec:8d:a9:10:46:22:18:db:7c:19:67:5f:10:68:60:
e4:ae:f9:be:8a:1b:44:77:94:fb:8a:77:e0:88:19:
4c:df:96:8d:51:5c:e7:c1:d3:64:1b:0c:2f:59:a2:
ba:5a:dd:35:e2:c6:19:4a:64:9b:e0:29:a1:d5:b2:
b0:f4:a1:63:9c:6b:31:2a:a5:73:de:e9:11:6f:4a:
7d:33:21:09:04:43:1b:e2:20:c7:f8:d1:8e:74:0a:
f7:69:bd:7f:5e:80:01:2e:6c:06:bf:5e:e8:40:1e:
55:7e:b9:77:fb:0d:19:1d:ea:8a:98:df:f4:10:01:
d9:1b:31:4f:11:54:62:d3:9a:8c:0d:34:5e:5c:c0:
6a:ef:cc:96:38:86:02:f0:7f:9e:35:15:2f:35:24:
db:67:5a:06:61:f4:56:cf:98:b0:fe:94:b0:22:4b:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:E8:7D:CA:4E:BB:51:1E:33:7C:FE:87:A5:BD:B2:43:6D:30:18
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7e:59:ed:2d:93:2e:01:90:98:50:45:c8:d9:c2:03:a2:6e:
4d:a3:71:6b:92:5b:4f:9e:9a:1d:71:ee:a8:15:e9:a4:21:e5:
89:ca:4d:1f:66:ea:7f:fd:ad:1f:a3:2f:2e:80:4c:9f:29:86:
5b:1c:e5:5a:ee:82:74:c5:52:ef:a9:45:83:42:67:6a:d2:a8:
90:dd:50:ce:2f:c6:0a:85:18:c0:d5:ca:04:93:99:7b:58:15:
45:8f:60:b7:fa:42:ae:6c:d3:c5:f1:c6:a2:97:9d:51:c9:4e:
61:e5:01:97:88:28:69:e8:84:e4:7f:8d:e9:f0:a2:1a:47:f5:
14:40:69:e5:24:e2:08:f8:d5:ca:5f:ab:32:16:51:4f:22:cb:
d1:2b:11:a7:88:f7:e8:c7:41:cc:97:ed:38:18:54:53:b0:17:
51:71:d1:c5:fc:b5:86:9d:5c:a0:64:6f:99:0b:77:0f:0d:b4:
2e:4e:a4:51:1c:f2:0b:0c:2a:9b:00:9c:f1:a5:4b:bd:c8:79:
0b:7c:71:44:0f:c1:c8:26:31:a8:62:2a:69:29:e0:5b:58:52:
a1:1c:d8:e1:75:ec:1d:56:e4:68:58:18:d8:fa:89:39:a9:17:
a2:9e:94:8e:e2:31:4e:9a:73:06:01:63:51:84:cf:c9:1d:23:
73:55:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:25:53 2025 by rpki-client