Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: 4L1JkjVLSMNXv+b+1dOa7Y+vOvSfsiId3gbwiYo132o=
Subject key identifier: B6:AF:F8:18:B0:52:EF:5A:51:D7:F0:32:56:59:C6:9B:67:85:7F:B2
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 0196B9A45C5B217319DE1261396FD005C8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 10:01:18 +0000
Manifest this update: Sat 10 May 2025 10:01:18 +0000
Manifest next update: Sun 11 May 2025 10:01:18 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: 3BpUG7ctItsZhg+LRP5XcaDqQ6KXmTh6nh26Ipt6Mpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:5c:5b:21:73:19:de:12:61:39:6f:d0:05:c8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: May 10 10:01:18 2025 GMT
Not After : May 11 10:01:18 2025 GMT
Subject: CN=b6aff818b052ef5a51d7f0325659c69b67857fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:e6:5f:81:c7:f2:39:7c:69:ef:c8:06:83:
53:10:ae:57:69:7b:1a:89:ce:cb:51:24:5f:9e:8a:
67:4d:7b:96:20:fc:c3:25:9d:fa:0c:7d:1c:33:81:
9f:fb:78:f5:16:9e:20:78:90:01:97:cb:b9:9a:cf:
fc:7f:22:e5:6b:19:51:9d:11:35:d9:9c:ad:82:94:
71:60:11:da:98:43:f0:b9:30:eb:a6:0a:97:37:ce:
1e:14:36:e8:a8:ec:ff:fb:d7:77:86:d0:5d:f9:6d:
7a:a4:b5:08:0e:f5:10:eb:0f:66:e6:f2:87:94:92:
b3:49:60:d7:16:61:42:59:37:59:1c:af:60:fa:43:
1f:66:3c:7e:de:c7:4e:05:1c:65:34:88:57:1a:9b:
91:06:f3:8e:95:47:17:89:2a:fd:87:82:72:29:fe:
fa:c6:0e:38:cf:27:bc:b5:18:aa:64:d9:75:f4:0a:
4f:d2:d5:29:08:c7:4a:a7:4c:76:d6:e1:77:f7:c3:
f8:5b:44:d1:a5:7d:82:36:3e:08:13:31:2b:62:c3:
ba:26:ef:ca:90:63:05:12:b0:4f:77:e9:c7:e4:bd:
19:61:9c:dc:c8:a6:e5:a4:cb:53:bb:fe:ea:8f:28:
44:5a:01:29:68:47:5f:4d:33:62:b4:14:4d:1f:d8:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:F8:18:B0:52:EF:5A:51:D7:F0:32:56:59:C6:9B:67:85:7F:B2
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:03:88:ac:17:85:21:50:d6:e3:62:c9:c9:2f:2f:d9:27:b9:
fe:b0:ee:47:70:d7:ec:79:8b:11:7c:d7:32:60:7e:41:45:4d:
b5:d5:d6:76:a2:18:47:32:6d:39:1a:d6:9f:da:fd:9a:b9:6d:
be:a3:84:bf:5a:11:81:97:00:e2:f4:18:5a:5a:d2:58:a1:49:
b8:71:9b:7d:b4:80:a8:a6:6b:35:15:dc:8e:b0:1f:14:87:6e:
81:36:8d:af:e0:4d:2a:15:b5:45:89:65:b1:fc:5c:65:ce:cd:
04:a7:d7:4a:9c:98:f2:bf:9a:4e:ff:f7:a6:50:36:95:f8:b5:
59:97:79:7d:58:2b:cc:73:70:e2:6c:38:29:7f:e2:ce:f5:bd:
f5:46:ff:58:2a:2e:a0:9f:84:d3:1c:cd:d5:14:0b:8d:08:33:
59:ef:cb:be:ab:c7:50:d8:e5:a9:e4:46:2b:5d:25:10:db:92:
b5:05:64:46:8d:90:05:22:13:d9:e8:3a:44:2c:f5:86:0d:cc:
30:87:30:da:a1:f6:18:90:99:10:61:f8:6c:fe:01:96:09:90:
26:77:17:0e:fc:54:f9:7f:6f:7d:de:03:97:1d:0f:c5:66:4a:
e1:57:b6:26:49:51:e5:ec:f2:d6:1c:85:c8:c2:be:f1:23:78:
6f:9b:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:37:56 2025 by rpki-client