Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: XXAQcgO9Td3thixgqYMqAhmYGLlm5w8d0htQEQ90H4A=
Subject key identifier: EF:26:39:73:4F:51:99:8D:11:BF:F6:62:F7:BA:5B:FE:73:CA:66:DD
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 0196D408229D0270888837616FABB766A387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0B12
Signing time: Thu 15 May 2025 13:00:24 +0000
Manifest this update: Thu 15 May 2025 13:00:24 +0000
Manifest next update: Fri 16 May 2025 13:00:24 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: aCiZEThKpnTrLuwH89rxHA9K5onG076O4YwCT9ZJk4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:22:9d:02:70:88:88:37:61:6f:ab:b7:66:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: May 15 13:00:24 2025 GMT
Not After : May 16 13:00:24 2025 GMT
Subject: CN=ef2639734f51998d11bff662f7ba5bfe73ca66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:f6:ca:70:7d:97:fd:cb:ba:dc:f6:6a:89:
3b:f4:da:81:a8:c6:cc:bd:90:36:c7:06:7d:3f:f5:
3e:a2:98:f1:47:6a:2c:d6:bf:27:00:56:5f:9b:b2:
e9:57:f8:81:8e:a2:4c:5c:5d:3b:23:37:f3:f5:79:
c4:9c:fe:bd:41:2d:af:4b:85:aa:b4:b6:8d:41:11:
8c:86:92:8f:be:86:2e:3d:f0:a7:6a:c0:ed:3a:ac:
7c:1e:87:33:79:c9:8e:09:c3:06:13:12:a7:55:32:
59:b3:3f:b0:3a:bf:f4:f5:45:65:15:8c:bb:c3:79:
35:34:2d:f7:ae:df:0f:ab:fe:8d:5d:46:00:4b:44:
50:ab:f8:80:ff:f3:06:77:2e:fe:17:4b:3f:08:28:
bd:14:ee:8f:db:7e:c0:5a:fd:bc:5b:cf:cd:0c:1b:
cb:e5:6c:73:b8:5b:e8:7b:46:51:e3:0b:83:28:57:
bd:37:fc:7d:3a:2e:4c:85:03:ca:04:05:da:44:4f:
c9:4b:a4:61:df:1b:f2:8b:4f:bf:21:01:d2:ec:00:
4d:26:3a:75:de:ad:72:8a:61:e8:a5:b8:89:86:20:
d4:68:6a:c9:5d:f1:cd:e5:4e:02:a0:d6:88:d7:b6:
27:bb:68:17:3a:08:3e:f1:31:a9:48:c6:ed:89:fa:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:39:73:4F:51:99:8D:11:BF:F6:62:F7:BA:5B:FE:73:CA:66:DD
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:99:a4:04:53:0e:a5:04:3c:9d:5f:55:01:bd:f7:ae:ee:
ae:41:85:55:84:9b:50:a0:0b:df:95:ff:f6:78:3a:94:76:48:
44:e4:f9:05:dc:25:b1:79:3d:ea:23:14:ab:e2:39:9d:97:01:
42:72:c7:c6:32:bd:bb:b1:3f:41:46:03:b7:16:98:0a:db:2c:
ca:04:4a:92:15:6f:1d:55:7a:cc:0a:9b:c1:ab:4e:9d:20:ee:
6b:ab:a8:e4:3a:78:c9:e4:54:a9:7c:05:2c:48:7b:f9:52:e2:
f2:60:6b:b0:c2:02:77:02:c4:2c:ea:dd:e9:28:0d:af:b4:e8:
2c:60:75:fb:84:66:1c:cb:59:22:eb:45:cc:0a:40:c2:8e:f3:
e6:c2:ef:68:aa:e9:ab:7b:ab:09:a1:34:0a:fd:27:1e:da:4c:
1c:12:df:88:6c:54:89:98:76:a3:84:9e:b3:e4:ad:3f:12:b1:
4a:4f:1c:5f:0e:72:19:8e:b9:d0:58:2c:3c:ae:89:50:24:97:
81:c2:7d:6a:df:d1:58:e1:f1:83:50:e3:52:b8:0e:65:b0:9f:
e5:55:99:ca:ba:28:87:ca:ce:7e:2a:51:0f:b1:a9:9f:45:ac:
77:4a:ed:29:c0:0b:f8:82:32:69:1a:20:49:c3:2f:5f:06:6e:
d1:19:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:05:00 2025 by rpki-client