Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: ZBRLUkNO/69YWSOjP44s39tQ3MTGbILRm5XLrf7Ye3Q=
Subject key identifier: C3:FD:5B:6A:C3:B1:80:E9:DB:A3:F0:65:27:BF:45:29:5B:63:5B:51
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 01969D19A30A7C3F47A1DA685D285199F0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 01F1
Signing time: Sun 04 May 2025 21:00:25 +0000
Manifest this update: Sun 04 May 2025 21:00:25 +0000
Manifest next update: Mon 05 May 2025 21:00:25 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: VWbOAP+9JxN+URKRefdxcwfgUWku7AxKjXr9GOXYn5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:a3:0a:7c:3f:47:a1:da:68:5d:28:51:99:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: May 4 21:00:25 2025 GMT
Not After : May 5 21:00:25 2025 GMT
Subject: CN=c3fd5b6ac3b180e9dba3f06527bf45295b635b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:a3:66:c0:a5:b9:8a:0e:ad:be:7e:15:4a:
3a:c4:d3:ce:1e:1f:e8:93:9b:5d:06:23:4f:b2:18:
09:9d:69:2e:40:ce:20:56:89:59:bd:ed:f2:9b:a7:
8c:23:8c:c6:c3:3b:ba:b2:9e:1f:be:fa:ca:0a:c0:
65:b5:f5:46:5f:ec:f1:90:4e:44:bd:f5:64:18:f0:
8e:2d:9e:fc:4a:3c:23:19:b9:dd:ed:46:bb:03:71:
b2:bc:79:5d:89:f4:db:d2:42:b5:3f:33:fe:6a:f8:
ab:d3:b0:f7:d6:df:e5:b5:d3:4c:10:0d:fc:fc:fb:
4e:f0:d2:da:23:f4:81:41:2f:aa:47:0e:95:cc:76:
85:d0:c8:0c:af:c4:6a:29:25:3d:7b:11:2a:9b:98:
a4:69:37:15:98:30:e2:a6:4c:88:86:2c:ed:c5:17:
24:08:d8:69:a7:82:1c:5c:63:e4:ee:b6:c5:8d:7a:
22:01:10:28:f9:8c:24:96:2f:cc:77:7d:60:ee:2c:
b9:af:b6:e2:c0:99:63:99:9e:2b:4d:4a:9a:84:58:
f2:ea:32:78:9c:f2:68:86:49:24:bc:98:82:c5:d7:
90:5a:c1:bb:7e:75:71:78:81:07:27:98:70:45:b7:
d6:98:28:71:ca:be:b9:43:4e:ce:8a:99:75:cf:b2:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:5B:6A:C3:B1:80:E9:DB:A3:F0:65:27:BF:45:29:5B:63:5B:51
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c8:24:14:bc:b4:63:ab:92:20:e9:8e:7f:3b:b0:7b:29:57:
01:1e:12:ae:3d:5c:dc:a8:6b:3f:b0:f1:26:1c:d9:65:9d:ef:
e5:af:f6:18:f9:eb:d2:7e:5f:4c:d3:e9:62:42:eb:d2:01:2a:
2d:14:ed:7f:db:a7:01:14:7b:fd:7a:fc:13:5f:73:0a:34:a4:
0a:76:65:84:8b:8d:ea:5a:7b:d3:58:bc:c9:7d:12:36:0d:f4:
a4:3e:87:e2:26:73:78:71:c9:97:4b:03:65:e0:03:7a:4d:63:
b5:c0:03:5f:7d:bc:de:c7:ce:85:8c:80:fd:b5:89:c9:72:bb:
4b:39:ed:0e:5e:db:47:dc:11:62:d1:5c:7d:3e:db:96:c5:ee:
1f:e5:98:2b:a0:a2:7f:c8:16:b0:9a:2a:57:a6:58:c7:e2:de:
a7:62:d6:c0:01:97:0a:a1:71:a0:22:76:53:87:16:5b:81:0c:
54:ad:81:c7:78:96:fc:fa:8b:a2:b8:8f:5e:cd:f0:b8:6c:e1:
f9:e3:9c:3c:65:f4:3e:a6:17:dd:34:06:a8:9f:52:6d:ce:80:
c6:d5:34:9b:0d:6f:18:34:0c:0d:7c:ed:e9:64:b5:ef:b1:97:
0d:56:d5:ce:a5:b8:11:e5:a4:e6:26:44:c3:9f:92:6c:30:37:
66:06:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:21:19 2025 by rpki-client