Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: dIeFsGT97/CBGzLNYy+VYbsmi5aqmA2jqHyvxv8axJc=
Subject key identifier: 28:BB:52:04:23:2E:4B:D4:DF:1B:D9:2F:78:E9:1D:B5:20:3E:E3:76
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 0196A1D27DDC98D666CC81B5E9D5F8F2FF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 19:00:48 +0000
Manifest this update: Mon 05 May 2025 19:00:48 +0000
Manifest next update: Tue 06 May 2025 19:00:48 +0000
Files and hashes: 1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: ax1e/o+CGlUQbn0P8nIEFpbcOP5mI7XxFyXcmf4jmsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:7d:dc:98:d6:66:cc:81:b5:e9:d5:f8:f2:ff:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: May 5 19:00:48 2025 GMT
Not After : May 6 19:00:48 2025 GMT
Subject: CN=28bb5204232e4bd4df1bd92f78e91db5203ee376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:63:88:9a:5b:04:25:f8:4d:e6:32:64:b9:
a0:23:22:fd:fb:4a:af:48:7e:45:85:f2:eb:40:7a:
c9:e5:9f:24:6e:46:03:6d:b5:00:95:84:1a:1a:d7:
81:75:a0:88:c3:50:26:0c:23:23:fd:c0:8d:0a:03:
78:b0:7f:42:d2:ac:ae:5e:5d:81:ae:e1:96:62:4b:
22:b9:af:59:43:40:e3:90:da:6a:5d:d3:73:0c:46:
18:0b:c0:3f:5b:d9:5f:f1:ce:82:0c:d1:03:71:e1:
92:7c:3f:49:0f:30:d2:47:d5:54:e1:00:91:b3:a1:
46:9c:ac:5d:bc:21:40:e8:d5:6b:12:98:59:30:eb:
d0:97:bb:77:c4:43:4f:79:ee:fb:79:4e:76:9f:4d:
12:00:d1:e4:1b:ae:62:5e:a0:86:e7:57:c4:45:dc:
e8:9a:41:fd:82:43:f2:0b:2e:d6:7a:6c:08:34:eb:
b7:f9:f7:6a:24:c4:8c:fe:c5:23:62:02:a3:d8:1e:
2b:dc:07:42:14:24:b8:6b:8c:94:1d:70:b0:00:c2:
52:f9:72:db:92:ca:eb:8c:2a:20:58:d7:aa:02:fc:
06:bd:52:06:9e:db:cc:31:a7:30:8f:20:93:ab:e8:
58:98:12:a1:18:a7:12:02:06:83:6e:3e:7c:93:cf:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:52:04:23:2E:4B:D4:DF:1B:D9:2F:78:E9:1D:B5:20:3E:E3:76
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:6c:82:ba:c6:c9:b5:35:2b:ee:bd:30:c0:f8:40:f4:a5:
f0:2d:4e:8c:ec:8c:9a:b3:0f:e1:ee:d2:03:8e:cf:0c:48:c7:
31:ac:0a:09:72:39:5d:0a:07:1e:71:62:72:68:03:47:c2:07:
b3:9e:34:6e:82:64:7d:94:ce:f3:80:75:2e:29:b6:c8:74:77:
63:f3:34:aa:1f:29:e1:51:e5:71:5d:f1:c3:0f:ae:9d:c4:09:
1f:45:25:e4:6a:8a:13:49:45:7f:db:55:d1:5f:83:c7:d3:64:
36:e7:df:86:c4:d7:fa:2e:d6:c6:28:52:6a:fe:75:a5:29:db:
3f:59:d1:8f:0f:ad:b2:32:bb:b2:ef:86:6c:72:e9:cf:cc:4a:
80:de:ca:f6:89:54:a4:d7:5d:3c:77:3f:fc:98:d2:ea:33:f9:
e6:56:f7:b2:57:a6:bf:f8:d0:fe:13:d6:98:59:9e:c6:e0:16:
58:20:b2:06:8a:78:4f:13:55:91:05:e4:f8:0e:b5:d2:b8:45:
9e:c7:c9:4a:59:e4:5c:48:5f:3f:87:cb:01:b9:dc:88:b0:f0:
cf:cd:eb:13:78:f7:9a:a7:ac:c4:db:cd:92:97:b3:53:68:f6:
86:22:89:86:9b:9f:5f:8c:ae:ab:ab:ac:8b:fd:d8:1e:ff:15:
eb:89:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:10:02 2025 by rpki-client