Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: z4UA5VyP96YCnKRTRBn4iqfjeoSDws1st092fWEEEJQ=
Subject key identifier: 02:29:E4:1D:B0:8C:CF:16:18:AD:27:DE:7B:C0:3B:04:63:49:25:D5
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 0196A878D65C1702CFF13E05D5235676F399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 1380
Signing time: Wed 07 May 2025 02:00:13 +0000
Manifest this update: Wed 07 May 2025 02:00:13 +0000
Manifest next update: Thu 08 May 2025 02:00:13 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: 7rPxjMPXGe/tn/vFtBC2ixUfeqiS5iemKEBeOoGVUkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:78:d6:5c:17:02:cf:f1:3e:05:d5:23:56:76:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: May 7 02:00:13 2025 GMT
Not After : May 8 02:00:13 2025 GMT
Subject: CN=0229e41db08ccf1618ad27de7bc03b04634925d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:47:a5:95:ca:b3:cd:4e:ac:5e:ba:12:4f:
07:5a:4a:21:94:d5:5b:33:a1:41:ff:b1:e2:99:80:
5b:75:d1:39:4c:f4:04:2c:d3:33:2a:c6:23:3c:4c:
86:60:68:85:9b:d2:90:0b:e0:b2:4e:e0:2c:f6:b7:
de:f6:4a:a4:05:30:68:23:81:2e:73:31:a8:73:c4:
18:f3:ed:94:e6:62:9a:21:5e:36:99:f8:68:f4:76:
e4:61:2e:3e:74:aa:e0:5f:01:21:40:df:b1:49:67:
ff:9c:ec:9a:4f:92:4c:07:87:c2:a9:38:21:12:81:
1d:8e:db:52:39:6f:ea:1c:7c:5c:af:e0:60:b7:04:
fd:51:1f:a2:4f:3e:b4:5c:b3:8f:7d:aa:ec:e2:8d:
43:c1:3b:55:c6:33:f1:4a:0d:46:79:a1:0a:37:42:
65:77:fb:bf:81:12:2f:d7:36:f5:e4:b2:6a:90:b1:
11:b0:bd:de:67:c7:b6:95:e3:17:36:a4:45:51:66:
62:e0:86:dd:5a:1e:3e:98:81:72:85:ba:4c:fa:ed:
56:ef:c1:bd:1d:a2:1d:09:9a:36:64:fd:10:16:90:
47:d1:8f:1d:c1:bf:b2:ff:7b:01:e2:ff:e0:e5:42:
b2:83:6e:26:6a:b9:58:31:4e:bf:a0:80:43:1b:f9:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:E4:1D:B0:8C:CF:16:18:AD:27:DE:7B:C0:3B:04:63:49:25:D5
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:db:2a:49:d5:15:a3:b9:6b:60:cf:86:87:b8:1d:32:3b:
15:77:f9:f0:e7:55:ba:e4:0a:ef:b0:3e:84:3c:cf:a1:15:99:
e9:be:e8:40:4a:54:da:34:6e:10:4d:ae:15:cf:2a:c6:51:2d:
5a:ed:3b:af:d9:4f:9d:d0:cc:b4:21:f1:9f:cb:c9:b7:55:f5:
e6:e5:a4:e3:72:39:10:b0:a8:fe:f9:1d:8f:41:29:ab:c0:31:
b7:85:a2:59:dd:9e:11:1f:3d:96:95:64:81:63:88:3b:8c:f5:
21:4b:ed:6e:7d:a2:6e:0b:b6:d9:c8:4c:1e:2c:33:9a:0d:28:
6d:b9:5a:6a:3e:72:7f:1c:c3:0a:00:b9:a7:00:08:bf:5b:41:
ec:98:7b:f4:d5:1a:61:01:b7:c1:2b:89:9b:4f:81:e1:17:e5:
e1:71:d7:16:b7:14:00:1c:db:a4:7a:37:6e:dd:3b:1c:53:95:
b7:a8:c6:f2:e5:ac:7d:23:25:54:37:ec:fc:02:a3:33:d2:77:
1c:2e:bd:bd:74:b2:3a:36:34:2d:d4:c7:b4:1e:a5:7d:32:23:
48:8e:fe:2c:df:f5:96:95:75:64:10:6a:31:47:b4:0d:d5:59:
eb:17:ce:cb:2f:07:d0:bd:28:38:00:98:b2:5a:4f:4e:4d:e5:
68:04:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:04:34 2025 by rpki-client