Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: yxn7h7yxiRkQVGZ2v3QtvCztXKiTye6HJRDB33Mj+l4=
Subject key identifier: BE:77:EF:14:A7:BE:3E:9D:4B:06:09:38:72:C9:C8:28:30:A7:EC:A8
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 0196B4EAD2DD4CA2A708FDCEECD6E2C1BD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 12:00:10 +0000
Manifest this update: Fri 09 May 2025 12:00:10 +0000
Manifest next update: Sat 10 May 2025 12:00:10 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: IQ1M/a0wj4MJFSYH83xveL2Jnq5VpOK8+LlVHmMtpUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:ea:d2:dd:4c:a2:a7:08:fd:ce:ec:d6:e2:c1:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: May 9 12:00:10 2025 GMT
Not After : May 10 12:00:10 2025 GMT
Subject: CN=be77ef14a7be3e9d4b06093872c9c82830a7eca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:89:ef:47:9b:b4:8d:23:fb:00:91:22:ba:
eb:2d:5f:1a:9b:e0:a5:0b:fd:22:33:d9:2d:b8:a2:
71:c5:99:67:1a:cd:70:4a:36:b7:34:79:29:a7:dc:
83:df:c4:7c:48:29:d0:81:3e:17:58:ad:78:8c:b7:
b9:0b:65:35:a0:63:c8:31:c1:fd:c6:a7:9a:6e:5d:
fa:53:0d:1a:e9:49:8d:6b:f5:e8:e4:14:6a:59:10:
3d:19:b9:7a:be:71:4e:13:bc:9e:c4:72:c9:f2:a6:
48:78:82:12:bb:11:e4:19:ee:11:ec:58:dc:68:6a:
21:5d:5d:b9:4b:48:d2:07:78:f7:35:99:a6:25:9f:
49:dd:cc:bf:93:99:41:22:7f:d5:64:99:9e:53:3d:
e9:44:7f:2d:c1:52:4b:97:6e:87:33:b0:70:19:93:
f4:a2:11:e3:0a:32:5e:1b:0e:c4:45:20:95:f7:9f:
a0:d1:f7:07:88:ed:c3:23:de:dd:cf:07:20:96:9d:
10:2f:4b:2b:c4:ff:4a:53:b2:f8:2e:ed:78:95:0b:
93:df:be:a8:53:d3:ed:04:4f:1f:eb:58:9f:82:58:
e1:18:a5:c0:e5:34:62:b4:65:db:76:f0:e9:89:f3:
50:48:87:b1:b0:30:a0:4e:ce:60:14:b8:f2:bd:de:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:EF:14:A7:BE:3E:9D:4B:06:09:38:72:C9:C8:28:30:A7:EC:A8
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:64:80:ae:a8:fa:67:3f:b1:6a:76:b8:81:43:e6:d3:a8:
16:46:d5:ac:78:10:66:13:42:24:7f:ac:87:2f:2e:b6:fd:5b:
a0:f1:cc:4f:28:90:c2:5a:98:99:a1:e7:06:da:03:b4:49:29:
74:55:d2:ff:bb:e4:4f:02:db:c2:d8:06:20:a5:ff:65:1a:82:
8a:5f:da:54:ce:d7:d0:fd:f1:7e:e0:ad:62:a1:c4:43:3e:f6:
66:bd:7a:e0:6f:b4:8d:19:d7:16:f0:48:61:63:7f:08:f1:59:
d7:bf:17:86:b3:96:0c:d6:c8:1f:6b:02:03:55:17:e3:ad:35:
90:ad:77:af:5d:d5:1d:16:5b:3e:8d:49:92:1d:a9:57:b8:75:
cd:66:4a:5b:f1:aa:dd:16:48:4a:83:67:2c:12:3b:01:10:5d:
3c:d1:21:94:f0:c4:bd:45:16:02:0c:f3:7b:ce:c3:65:b8:f1:
1e:82:83:ff:57:69:91:34:d3:70:da:00:be:b8:3e:87:57:4e:
fe:0a:ba:a6:f8:f5:c1:25:04:e7:39:a2:6e:7e:38:e9:61:6c:
2b:90:66:65:4b:ec:e8:de:fe:ef:d4:04:74:57:80:c9:d2:51:
4f:07:79:fc:1a:e3:b4:b1:16:15:d5:20:ba:43:c1:fb:66:1e:
1b:4d:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:00:47 2025 by rpki-client