Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: NsoHC7qseoWeY9cAyFMv02QrRpx6GLvqsGa0DXhZWTM=
Subject key identifier: EE:87:84:35:54:6C:C7:BC:7E:47:4D:71:38:3E:F0:AF:50:03:95:FF
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 0196A19B0428D0355EC94F1E800D3732460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0D25
Signing time: Mon 05 May 2025 18:00:12 +0000
Manifest this update: Mon 05 May 2025 18:00:12 +0000
Manifest next update: Tue 06 May 2025 18:00:12 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: scGvDZVmyvNOTohP2U+XvTf3l00HJmgDlVlYmv0Z50M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:04:28:d0:35:5e:c9:4f:1e:80:0d:37:32:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: May 5 18:00:12 2025 GMT
Not After : May 6 18:00:12 2025 GMT
Subject: CN=ee878435546cc7bc7e474d71383ef0af500395ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:37:75:f9:55:6e:dc:3e:67:fb:8b:e5:57:
56:f2:85:92:c6:7f:cb:fb:f6:3a:b3:74:af:39:df:
79:c7:2f:de:09:fd:36:4b:19:9c:d3:92:1a:b5:f3:
a3:d6:54:64:5b:07:eb:5d:bf:bd:a7:fd:ce:13:96:
5c:4c:a9:fb:c8:e5:15:8e:67:4e:18:31:5b:35:41:
8a:5b:8b:b1:de:17:e0:54:a6:56:fa:d0:dc:f9:4e:
a3:6e:83:57:b6:2c:e9:06:93:4e:ee:c0:31:f4:eb:
b8:45:5f:f6:00:50:12:f4:e0:4e:38:08:e5:ce:f9:
ec:65:07:5f:61:24:92:1b:a3:80:15:f1:89:32:fb:
3d:f5:35:c7:d6:63:92:72:ac:36:43:45:ef:61:35:
fe:c7:13:31:1a:44:90:1c:05:1c:7c:b1:1a:14:05:
0a:49:c2:89:a3:f3:d5:99:72:48:43:51:8e:33:0f:
94:62:8c:bb:91:c7:47:e4:43:8a:3f:f1:92:65:fd:
0d:11:31:0e:4c:8e:0e:03:ec:d3:d8:a5:9d:80:ea:
f7:ce:ea:0e:2e:64:56:5c:96:72:23:db:6b:4e:4f:
d7:bd:1a:b3:c9:77:6b:68:e3:bd:1e:69:b6:d0:37:
20:fe:c6:f4:8a:ac:15:b0:aa:42:dd:cf:5d:79:55:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:84:35:54:6C:C7:BC:7E:47:4D:71:38:3E:F0:AF:50:03:95:FF
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:4a:53:42:97:49:d2:12:97:ad:77:8f:39:4a:8d:a0:d8:
1c:d6:f4:b0:bc:58:51:ec:b8:50:a0:89:78:7d:6a:33:02:77:
ee:6e:43:e7:4f:ea:42:ca:ee:91:59:f3:a8:c2:fc:0e:8f:d1:
11:c9:64:f6:3f:9b:ee:07:af:b0:fc:d3:96:38:80:d6:bf:1f:
4f:76:ee:62:c1:9a:fc:ce:c6:e2:24:ad:1b:5d:6a:7a:23:91:
ac:46:06:bb:da:08:9b:a7:40:f7:04:67:b2:10:e9:c5:83:fa:
e7:46:e6:0b:93:28:5c:05:49:fc:84:08:90:3a:c3:92:91:6c:
52:81:b7:61:64:9e:e8:f8:7d:b9:1c:5f:12:7f:23:f6:5d:70:
f2:0f:0b:1c:6e:16:96:b9:cd:09:8d:ea:9d:b7:3c:ad:c8:de:
17:15:c8:c3:5c:9e:b4:3e:e6:80:8a:34:b6:6e:31:d5:6e:26:
f3:77:b9:0f:e2:45:18:93:52:2d:7b:e7:81:d5:a9:53:ba:25:
e8:4d:96:88:d1:e3:ec:d2:cf:e5:2c:dd:36:a3:84:58:b0:86:
f9:bc:20:2a:ea:e3:dd:58:8b:8f:5a:6d:59:31:b6:1b:13:aa:
b8:35:ac:4a:71:98:b6:c6:47:78:a5:39:c7:8c:94:b2:55:d7:
91:bb:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:13:30 2025 by rpki-client