Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: ZP3PoKBDaWbmB8HBrtP7WGF4MXWG8Xr2JD7VNWASzSc=
Subject key identifier: 79:77:3F:0A:B2:F3:D1:24:8C:32:AC:6A:2A:0E:58:A3:76:5C:E3:A5
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 0196DAE6398BDC79986DB8FB34A227E45D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 14D4
Signing time: Fri 16 May 2025 21:00:43 +0000
Manifest this update: Fri 16 May 2025 21:00:43 +0000
Manifest next update: Sat 17 May 2025 21:00:43 +0000
Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: lq6ogtvwNgCUsh+GyDWbcq4fR3QOgBugFVUyxCUXntY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:39:8b:dc:79:98:6d:b8:fb:34:a2:27:e4:5d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: May 16 21:00:43 2025 GMT
Not After : May 17 21:00:43 2025 GMT
Subject: CN=79773f0ab2f3d1248c32ac6a2a0e58a3765ce3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:cf:f5:5f:df:b8:09:d9:db:b2:6f:02:36:
09:9c:5c:fd:2e:8a:54:22:02:23:63:f2:25:38:49:
cb:cf:11:ce:50:9c:32:3b:84:87:40:ed:67:01:4e:
42:52:b9:19:53:23:92:4a:85:b0:85:fb:b3:de:78:
90:a7:38:17:7b:88:f8:05:d6:5c:d8:e1:41:1e:ef:
80:14:30:b9:87:ce:3e:cd:9d:7d:87:c9:cc:14:53:
7d:05:60:da:e1:da:b9:e4:49:1a:3b:ff:89:19:9c:
cf:0a:fd:16:66:07:ce:50:ae:ec:9d:a3:70:ce:a1:
23:22:8f:b3:72:8a:72:1b:0f:de:b4:c4:e8:b0:00:
ce:95:cc:6b:d8:51:8a:08:b6:6b:9d:e9:d2:40:32:
84:66:40:58:ad:76:09:12:73:37:23:10:ec:40:fb:
fd:1e:c4:4a:f1:a5:df:27:e6:9f:9a:41:54:09:61:
40:d5:aa:b2:16:82:15:f7:74:29:88:e7:80:1b:7d:
08:eb:c6:2a:75:a3:31:2d:f3:0d:ac:7a:c5:03:4f:
b3:5f:08:41:dc:eb:b0:41:9d:a1:dd:b0:cc:05:88:
6d:f1:27:3b:c4:fd:dc:7b:8d:18:22:52:4d:9e:8d:
d6:e7:cc:e0:71:9e:17:fd:d0:70:5c:21:82:2a:e4:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:3F:0A:B2:F3:D1:24:8C:32:AC:6A:2A:0E:58:A3:76:5C:E3:A5
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4b:b2:27:93:04:10:37:79:4f:01:ae:2c:0c:d1:77:13:54:
be:20:3c:f3:57:02:e5:88:ad:12:2d:7e:10:f6:51:3c:aa:20:
c3:5e:8e:4d:5d:e2:1c:f0:bd:16:f7:eb:60:c2:3c:c9:c6:03:
1e:2a:68:69:f3:99:15:f4:76:e0:ce:48:3b:85:f3:49:09:68:
f9:db:6a:52:95:2f:98:c8:58:a9:33:d8:09:7d:4e:75:09:56:
1f:a7:09:44:f0:63:7f:03:71:88:d5:6e:8e:fa:ef:46:71:c0:
c2:6a:16:c5:c9:27:43:39:b3:6b:c7:8d:0b:14:82:18:fb:23:
4b:2e:57:b6:ad:fc:77:bf:41:46:79:c7:69:51:75:11:af:91:
6a:88:ea:60:ba:71:ec:02:d1:47:ae:b3:d0:b7:c3:ce:98:2c:
cd:40:d8:88:74:2a:d0:05:5d:af:94:75:0b:2d:e1:11:1e:d4:
e8:88:2d:d4:73:43:9d:3e:a3:be:6d:8f:ff:8d:b8:7f:83:45:
a6:9d:02:d0:6d:d5:e8:31:51:86:3c:c9:44:58:8b:c9:19:9c:
c9:27:af:61:ec:33:46:98:bc:81:56:4e:40:79:cf:37:e5:84:
44:48:a7:e1:77:be:3a:bf:01:46:1e:dd:a3:1c:78:12:76:d4:
80:ec:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:06 2025 by rpki-client