Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: RZujhtUpwiKvTW6N8MytzLmv1pYeippnoGzHlajpVWw=
Subject key identifier: 7C:AC:4B:11:37:9D:42:FD:26:B6:67:1F:D5:7D:C8:EB:D4:D5:DF:91
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0196BCA4ADD43144F1F91A4BB897C956AB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 02D2
Signing time: Sun 11 May 2025 00:00:31 +0000
Manifest this update: Sun 11 May 2025 00:00:31 +0000
Manifest next update: Mon 12 May 2025 00:00:31 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: 134IUB6us0ts3ECVjTTeyMUzMhwo4RYYsB1YyV6lk7E=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:ad:d4:31:44:f1:f9:1a:4b:b8:97:c9:56:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: May 11 00:00:31 2025 GMT
Not After : May 12 00:00:31 2025 GMT
Subject: CN=7cac4b11379d42fd26b6671fd57dc8ebd4d5df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:7e:49:a3:6e:de:b3:1e:ad:3c:41:59:62:
0e:37:6f:78:1b:5a:cc:9f:17:f8:d2:c9:e0:03:b7:
8a:6f:ce:18:3e:fc:0d:1b:f4:b3:64:b5:c5:0e:35:
43:7f:8e:04:a6:57:8e:b2:14:5c:b4:1c:d7:f0:98:
af:eb:36:08:1a:af:2d:34:6e:e8:20:21:cf:49:c1:
72:fa:f7:cb:f5:ea:7f:d2:a0:c5:bb:b6:d4:93:0c:
c8:62:ae:b5:3c:3f:27:87:85:e9:ce:f5:7b:85:d9:
0e:57:35:51:49:d4:77:1e:68:b2:aa:88:ad:f5:f1:
58:3e:7a:77:f8:9e:21:08:c8:5f:fa:04:13:fb:c8:
e2:ae:30:d6:de:d4:c9:ca:02:94:3d:75:2a:40:51:
c5:c9:59:96:27:26:44:6c:97:1b:b4:d1:3f:03:ba:
a0:16:16:60:1b:3b:c6:c7:2d:8f:55:6a:69:5e:f0:
a8:f9:68:cb:4d:b1:01:b4:99:89:69:08:de:e5:9d:
5c:04:54:0e:c9:8c:93:a3:f5:1c:8e:1c:5c:24:ad:
30:8d:b3:f6:a0:55:02:8f:96:7e:f4:f9:05:57:e6:
28:c5:d4:04:9a:e2:10:ba:53:41:cb:ec:a3:f6:33:
a7:55:f9:79:12:c7:2b:d8:f0:42:68:42:4a:5f:5b:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:4B:11:37:9D:42:FD:26:B6:67:1F:D5:7D:C8:EB:D4:D5:DF:91
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:73:5e:46:d6:9a:60:33:07:36:f2:b6:8e:5f:a2:4b:f9:
45:0f:02:77:f6:9b:0f:e6:11:22:12:e4:93:8e:1f:1c:42:9a:
af:57:b8:6e:d7:ae:85:85:3e:ea:95:c2:7a:8d:e1:16:52:a0:
f8:52:7c:3c:62:59:37:7c:65:75:11:56:d3:b2:bb:54:26:2b:
42:43:3f:d4:fe:b5:d6:c2:65:ce:ed:cc:b0:20:8e:79:8b:3b:
65:f0:38:09:31:2c:05:22:74:cd:ee:81:92:20:2b:4c:05:81:
42:76:4a:96:98:1e:9c:23:a2:a1:69:0c:50:37:03:7f:31:3f:
a0:f6:e2:46:08:0f:0e:d4:8f:27:8c:44:c4:04:79:0c:4e:94:
1a:45:d3:82:d1:07:88:08:10:ba:33:6e:23:a2:2b:31:6a:43:
49:0c:04:18:b7:42:12:7c:6d:aa:02:9e:45:7c:ab:11:29:a5:
ca:94:f5:99:05:c6:4f:7e:b2:8e:5c:66:1a:c9:a9:c5:1b:96:
e3:e9:fd:bf:78:8e:e4:9a:8f:a7:d9:73:f4:7f:6f:17:f0:87:
47:fe:84:a1:ba:9a:d8:2b:a0:5d:f8:a6:1f:8a:90:13:0b:70:
5e:6c:f7:a5:59:bb:73:64:3b:aa:bf:c1:03:02:02:63:42:a5:
78:e5:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:46 2025 by rpki-client