Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: 2riNqFg+KG6fcZ1YtcXe4jCy0C/rpzM+YGEAktuTwgs=
Subject key identifier: 66:9E:B4:2F:AA:C8:8C:11:04:23:0C:FA:62:F2:98:90:16:FF:9A:D7
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 0196A79D510F24124576939104F1C08B469A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 22:00:26 +0000
Manifest this update: Tue 06 May 2025 22:00:26 +0000
Manifest next update: Wed 07 May 2025 22:00:26 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: Yowhdpcdb8uIB4yk6SAKbxEGNXH3fxkU9yIYGobV1T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:51:0f:24:12:45:76:93:91:04:f1:c0:8b:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: May 6 22:00:26 2025 GMT
Not After : May 7 22:00:26 2025 GMT
Subject: CN=669eb42faac88c1104230cfa62f2989016ff9ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:61:bc:9a:a9:ec:e1:e4:82:75:2c:3e:b9:
bd:5d:61:22:f1:ea:e1:7b:71:dd:2f:f3:10:9d:d2:
59:e9:e4:77:51:91:2e:7b:3b:a1:8b:73:23:38:a6:
52:11:ee:a1:8f:91:36:4b:70:61:9a:5a:48:74:bd:
19:b6:09:b2:de:12:ac:77:74:38:3a:cb:0d:56:36:
1a:ba:df:1f:74:10:88:c2:fc:80:ec:2f:38:97:b2:
ae:32:49:f0:72:7f:c5:65:75:06:01:cc:1b:49:a7:
15:c7:50:92:7e:91:d5:f1:77:19:da:96:0a:f3:d9:
fb:35:b8:30:85:3f:e4:d6:92:a0:95:ce:75:e1:86:
70:67:a6:eb:86:4a:a0:6e:34:c5:d0:81:01:8f:60:
44:ba:04:4b:dc:e4:57:4d:14:01:09:55:a1:dc:59:
44:a5:94:e7:3e:eb:d7:50:6d:aa:76:15:10:c8:4b:
14:37:46:26:74:26:72:1c:1c:20:e9:54:ba:77:c2:
a4:43:8f:bc:2b:74:3f:e3:e7:d4:43:1c:69:5b:dc:
53:6a:0f:31:cd:69:d4:82:58:a7:53:d3:c4:85:32:
6e:22:c0:af:e2:60:9d:68:01:28:d1:dc:08:cb:c5:
1c:da:37:88:25:14:9c:35:46:d9:f7:1c:4b:3e:f6:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:B4:2F:AA:C8:8C:11:04:23:0C:FA:62:F2:98:90:16:FF:9A:D7
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:be:f9:35:b9:23:78:67:38:5c:ad:52:d4:aa:95:a0:39:2c:
0d:96:d2:1e:72:8a:47:12:41:be:28:69:95:5e:72:8c:b9:49:
b2:df:66:5b:6b:c9:31:9b:cd:c8:2a:e8:ba:0e:78:93:c0:66:
8b:59:97:30:19:74:ae:04:a1:c4:99:9e:bb:23:d3:cf:fb:ca:
52:34:e2:c4:10:01:f1:d2:f1:9e:c8:6e:de:e0:5f:b8:c3:d2:
f0:8d:70:1e:75:41:b3:33:70:ac:bb:45:63:6d:96:1e:bd:94:
53:5e:4c:11:fd:b7:71:fc:f0:bf:3e:85:35:36:c0:4d:51:af:
59:54:c5:95:79:c3:f4:f2:a7:b9:c4:db:57:71:96:67:3c:13:
fd:d4:e7:30:d4:e0:96:0b:27:d0:b7:d9:0d:d8:0c:25:6b:24:
42:95:3e:e6:22:73:13:52:0b:1a:f9:2c:3d:0c:35:bb:95:05:
a8:28:6f:e0:a8:9a:36:71:27:e4:34:4a:38:66:8a:28:61:0c:
3c:24:32:52:b2:c7:e7:41:19:c5:13:6a:c7:ac:1d:c4:61:74:
e7:80:5f:91:86:2a:ed:6a:31:5c:00:5b:14:e3:67:c5:7d:33:
59:ae:c5:69:4f:cc:cb:02:ee:64:78:68:5f:ed:00:f1:ed:78:
ac:41:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:45:59 2025 by rpki-client