Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: 5z5yZs7aSsN5dlHDTioy6Sr+fQ4KbBcO0whW8k6mlxo=
Subject key identifier: E1:AF:B8:12:9A:CF:D9:58:35:99:E1:95:03:00:7A:3E:11:8B:46:80
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 0196BD813AA671DA7BB818091F94DF920505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 1250
Signing time: Sun 11 May 2025 04:01:24 +0000
Manifest this update: Sun 11 May 2025 04:01:24 +0000
Manifest next update: Mon 12 May 2025 04:01:24 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: tSr0s7A1x7cYHYN7+K2e87elHpnBRr7s63ZjIpKYJAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:3a:a6:71:da:7b:b8:18:09:1f:94:df:92:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: May 11 04:01:24 2025 GMT
Not After : May 12 04:01:24 2025 GMT
Subject: CN=e1afb8129acfd9583599e19503007a3e118b4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:ae:c1:88:b2:74:e8:a7:5d:53:de:7a:24:
83:1d:4c:49:56:5e:f5:7f:19:27:93:65:fc:f6:5c:
f3:4b:00:fb:47:af:d1:9b:72:6d:10:9e:db:ce:af:
32:9c:36:28:b0:6e:ce:3b:e5:b1:f3:5b:c7:e9:68:
90:5b:bc:31:31:28:ef:f1:72:96:b5:4a:68:ed:bc:
f8:60:82:bd:ec:86:98:a5:07:c0:5e:c2:d3:82:42:
18:f8:8f:b9:cf:ec:e5:5d:d8:ba:de:a0:df:99:72:
cb:b2:06:ca:a4:e5:0b:7f:18:f4:df:ca:cf:bd:0e:
d0:59:41:33:58:a1:34:2d:53:38:df:fc:a8:f4:86:
b8:48:d2:b6:d4:9f:0a:b5:7d:de:c5:48:cc:2e:83:
cb:2b:2c:8d:51:ec:c4:62:59:a7:fe:2d:24:dd:fb:
ce:6b:d5:02:02:95:43:b9:79:4d:f6:3e:02:a7:22:
da:1a:3f:c7:a3:0c:34:01:69:0b:2d:d6:53:52:20:
5b:3c:8b:9a:76:b6:5b:72:d0:e9:ef:57:73:2c:3a:
97:6e:ae:5a:72:c3:80:d4:97:65:36:d2:bf:2f:12:
a6:4d:8d:b8:ec:cf:86:52:3a:0f:68:61:29:cb:83:
47:b2:ed:c1:9d:2c:48:20:fb:5e:33:75:94:ff:22:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:B8:12:9A:CF:D9:58:35:99:E1:95:03:00:7A:3E:11:8B:46:80
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:25:8d:86:34:82:eb:bc:e2:88:a9:b5:16:86:3c:56:03:ca:
f0:ec:3a:e1:88:b7:06:e0:63:e1:1b:82:fe:61:83:f1:f5:c3:
f0:29:7f:7c:ec:f6:60:fe:7e:21:57:a7:b9:68:97:e8:46:88:
61:57:aa:7a:7a:61:79:bb:90:ac:8b:d1:3e:e9:e6:3e:7a:fd:
94:e2:07:8a:d3:03:df:a8:19:63:98:e4:07:df:4a:9e:b4:fe:
c4:f3:7f:65:20:ee:8f:33:97:4b:22:ce:6c:9f:7c:74:66:7c:
ac:d7:85:81:0d:43:35:29:cf:c7:30:c1:fe:8f:32:be:77:3e:
bb:10:36:19:7c:15:4b:8f:7d:7d:b4:62:70:02:34:12:66:9b:
65:df:1e:21:fa:cf:37:36:62:f6:9d:ee:09:ad:aa:be:53:49:
70:29:c3:0b:e6:15:a6:02:d0:12:7c:2b:3a:a2:60:04:ae:d0:
33:be:38:b4:23:86:2e:e0:46:ce:45:58:30:7d:eb:3b:57:c7:
ee:dd:14:3e:6d:8d:4f:3d:ee:a6:6b:1b:92:bf:a6:a7:1a:ad:
b4:e6:b4:73:af:6b:c2:01:4d:22:80:64:fa:b7:75:3c:48:8b:
4e:77:cc:42:8f:6f:5b:b4:7f:eb:ad:45:7d:05:4c:02:3d:d5:
43:0d:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:31 2025 by rpki-client