Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: a9Q2RFWhQxhD55hoaqXbA+eqyb64S4tSqRl9iEph3QQ=
Subject key identifier: 6E:32:DF:4F:63:49:ED:2E:37:84:24:11:12:EF:C5:45:99:F5:47:5A
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 0196A98C0B90B61BEFABE15D7F045DC6183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 07:00:49 +0000
Manifest this update: Wed 07 May 2025 07:00:49 +0000
Manifest next update: Thu 08 May 2025 07:00:49 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: cBLpItdCn3EhPKc59AGGa8mwubfWay5VOlaw/4tDDLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:0b:90:b6:1b:ef:ab:e1:5d:7f:04:5d:c6:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: May 7 07:00:49 2025 GMT
Not After : May 8 07:00:49 2025 GMT
Subject: CN=6e32df4f6349ed2e3784241112efc54599f5475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:bf:0c:70:de:4e:25:c3:de:36:db:5f:7a:
51:c6:66:38:2d:2b:f8:ab:c6:c0:e5:58:aa:47:89:
b3:f5:a7:42:04:11:9b:e8:57:d8:6c:01:1b:54:85:
55:1f:e1:ad:48:56:b3:77:11:ac:6b:59:d3:05:f5:
fa:d8:4c:95:d6:1e:d2:90:5d:32:4f:3b:a2:c5:0b:
89:ce:25:c6:57:64:b7:f0:54:96:3e:1a:c8:4a:1d:
4b:a7:8e:ec:fa:77:33:45:d3:6d:98:af:ca:0d:b8:
dc:ae:3e:55:af:31:f8:b5:f9:d2:2c:ed:ed:df:5c:
ca:84:89:bb:a9:ff:5e:d7:ac:b4:b2:a5:e3:e9:f0:
5d:3c:a8:bb:78:88:21:c1:7a:22:ab:64:c9:92:bd:
1e:2f:ab:d1:53:c5:48:12:ac:a2:ed:a8:8f:c7:8c:
0d:b9:42:ad:46:c6:3b:8b:26:77:46:95:49:2c:ee:
cb:20:ff:a5:37:bf:e6:e0:ef:50:d5:ad:9e:fd:41:
f1:a0:bc:fd:6e:d5:c0:ea:ad:c5:7a:6d:9a:ae:29:
c4:d9:fd:c0:39:b0:a8:a3:40:86:c3:5e:87:ed:61:
90:9a:2d:d9:fd:86:af:89:f8:9f:6f:0c:23:de:62:
57:ba:cf:f8:2c:ba:fb:b3:0a:cb:03:39:a3:14:8f:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:32:DF:4F:63:49:ED:2E:37:84:24:11:12:EF:C5:45:99:F5:47:5A
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:dc:d1:97:5c:65:f8:e2:5e:d2:9e:54:98:cc:0c:1d:78:
26:e6:d2:62:ce:ab:4a:fd:a4:5b:b1:29:e5:b8:bd:38:d6:b1:
39:a3:18:89:10:67:21:af:a3:d9:24:4b:a5:97:83:1b:ca:c3:
9a:26:b3:6e:93:87:4d:60:7e:0d:ff:a5:0f:05:fe:41:dc:38:
a8:f5:31:59:94:6c:20:a6:94:00:fd:f3:94:68:76:c1:ae:2a:
3d:aa:53:e2:a5:7e:1c:db:37:d7:66:0a:f9:2e:58:44:3d:12:
e1:2e:67:0c:73:a5:35:b7:4c:44:39:fd:ed:23:6b:53:87:1d:
cf:92:99:ea:7c:75:2d:98:c5:ca:cc:eb:35:0a:75:1c:35:f1:
bd:ac:dc:6d:83:00:79:6d:cc:f5:6f:7a:d2:46:87:e5:eb:c9:
52:e2:ff:47:e0:7e:1b:af:42:40:66:14:5f:d2:3e:1f:17:8d:
40:cf:0e:8a:f4:a0:7e:d9:b1:1e:30:07:2a:f7:97:fd:ba:c6:
f9:e6:1e:93:16:a2:6f:fe:48:44:ca:43:1f:36:3f:e2:0b:29:
72:a6:97:7e:ab:14:51:c9:b3:86:1d:6c:27:80:5d:8e:b4:b4:
8f:ff:2f:17:6d:ac:07:3f:63:ab:bf:5f:72:d3:c9:65:e9:4f:
64:4f:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:22:42 2025 by rpki-client