Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: vlBiBmdeyRT3S1/006GSDBBKmp1kB+CYY4jWKuKpTk8=
Subject key identifier: 09:94:76:52:F6:6F:2D:54:40:78:4B:0A:F1:03:0D:CF:13:A6:EF:D7
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 0196C2A6BDD8B7D61EE01697BEEDE830712A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1343
Signing time: Mon 12 May 2025 04:00:29 +0000
Manifest this update: Mon 12 May 2025 04:00:29 +0000
Manifest next update: Tue 13 May 2025 04:00:29 +0000
Files and hashes: 1: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
2: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (hash: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: bphTs1CEmBzQApir+t0HY9Z/fU2ahzSI8ZfwGBQWxsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:bd:d8:b7:d6:1e:e0:16:97:be:ed:e8:30:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: May 12 04:00:29 2025 GMT
Not After : May 13 04:00:29 2025 GMT
Subject: CN=09947652f66f2d5440784b0af1030dcf13a6efd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:07:d3:ad:8b:10:de:f0:91:d3:ce:73:83:
d3:91:48:29:34:85:48:c5:e0:5c:ac:17:63:a9:74:
94:df:25:59:ef:02:3d:00:6b:cf:42:8d:db:b7:27:
c4:bb:93:9f:14:63:f2:8b:52:4a:62:a1:5d:63:0c:
25:c9:9d:3a:2b:6e:04:9c:22:18:32:ff:fd:aa:5f:
81:c7:16:28:63:df:44:23:71:6c:6a:4b:01:00:5a:
6c:f7:78:09:54:0a:14:9b:2f:16:e1:30:a7:09:5e:
e2:3a:0f:85:4d:94:c7:57:d8:d9:58:f2:ef:27:52:
4e:b0:a4:6a:97:5d:84:a4:62:a4:0e:2a:03:99:66:
3f:01:e8:d6:6b:90:a6:38:d8:4f:e9:8e:e5:9d:39:
80:09:1e:33:4b:11:f3:a8:a4:d6:6d:3c:69:8f:28:
e6:bc:5a:6b:70:1b:90:09:63:aa:74:7e:74:24:c9:
c4:ef:76:cb:61:69:23:57:29:af:89:ef:db:0a:4a:
d3:f2:b8:31:9c:38:ce:05:9a:8e:77:7d:8b:2b:cc:
92:99:62:ee:cf:da:a7:67:0d:49:f8:b4:1d:e6:4e:
a5:89:25:28:ab:0a:71:96:84:cb:19:c0:4b:1a:a0:
87:77:39:2f:1c:c7:96:98:74:70:52:75:8d:27:01:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:76:52:F6:6F:2D:54:40:78:4B:0A:F1:03:0D:CF:13:A6:EF:D7
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:9b:04:c7:d3:6e:13:83:5e:ec:ab:eb:07:73:ce:f0:cb:
25:af:a6:28:c6:50:82:68:a5:6b:d4:d4:1c:ff:99:a9:e4:f3:
65:a3:66:de:ef:b0:ce:d9:da:a4:62:7c:fe:0d:06:a9:5d:4b:
00:1f:d5:b1:ae:19:3a:e8:65:72:e4:d5:fb:98:15:36:45:9f:
1f:a7:f0:c8:70:1e:e1:7f:14:7e:f0:da:a8:b9:b2:35:2a:82:
f7:6c:c2:c3:52:a4:ca:e8:a0:38:84:e6:a4:36:b4:b9:88:1e:
d7:34:89:d0:c8:af:be:ff:9d:cd:77:67:e6:7b:b8:2b:c0:3e:
bf:0d:24:b0:f9:d6:2f:e5:cb:ff:d6:26:fa:93:78:0a:7a:44:
bc:cf:ef:9e:43:58:e2:13:ce:d3:0b:24:df:e0:50:7c:f9:9f:
9b:2c:b4:8a:7a:e7:e3:6c:b4:a1:eb:29:3f:fd:69:4b:b7:0c:
8c:9e:89:04:e0:0c:00:ab:6e:53:88:79:72:75:5b:12:13:f0:
33:72:b4:76:53:58:2e:f5:ab:f0:bb:db:d1:1a:42:8b:2b:c1:
32:fc:ac:93:07:45:ba:be:cf:b0:a3:33:56:71:bd:bd:ba:d3:
ba:a4:fd:60:15:f9:48:b1:22:3e:c5:ff:4b:af:77:62:e7:1d:
5c:b6:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:35:19 2025 by rpki-client