Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: y1l00L9XNEr1X0ea6CVpEa40kuDzBhvMBZUWg4JClcw=
Subject key identifier: 52:B9:51:8E:72:12:04:F3:F7:6F:B2:4D:4C:E9:B1:82:7F:47:5B:79
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 0196A540F955641D3476CD1211DF12FB8B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 0F12
Signing time: Tue 06 May 2025 11:00:20 +0000
Manifest this update: Tue 06 May 2025 11:00:20 +0000
Manifest next update: Wed 07 May 2025 11:00:20 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: pc16h1F9G9PWSJS32syoILSBAObVwS5CO/oDhUPFMZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:40:f9:55:64:1d:34:76:cd:12:11:df:12:fb:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: May 6 11:00:20 2025 GMT
Not After : May 7 11:00:20 2025 GMT
Subject: CN=52b9518e721204f3f76fb24d4ce9b1827f475b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:9b:1a:8d:2c:8d:c2:dd:08:dc:9b:93:4c:
88:d0:b6:fa:7e:5b:56:e0:ea:19:27:99:58:b2:42:
47:99:85:dd:44:aa:10:73:39:50:52:7f:e2:6e:21:
fc:4b:c9:d8:99:ac:f2:67:38:c8:87:15:b4:2d:37:
8a:60:14:db:b0:b6:c6:c1:a1:26:2d:92:9a:c2:29:
8b:ff:3e:9a:91:96:68:24:55:58:d8:ab:8a:f2:c3:
e7:2c:c7:cb:77:ee:9f:36:e8:10:9e:92:2e:77:fe:
8c:14:71:da:9b:a8:bc:11:27:45:58:92:28:2a:22:
17:8f:af:b4:20:02:d3:ce:f0:3b:75:e4:ba:01:76:
49:f7:0e:5c:c1:db:38:44:1b:02:19:2b:7c:7b:a5:
7e:ba:97:0a:4b:d4:10:9b:1a:1b:e7:9e:1e:ea:6f:
f4:8c:fd:5e:87:2f:a3:15:55:55:cd:43:2d:e1:57:
ce:1d:3f:01:c6:0d:b7:e8:df:f6:50:47:c6:c8:91:
a5:27:73:63:4e:c8:39:d9:a5:c2:15:6d:f6:38:44:
c9:97:02:ed:6c:58:f7:c0:db:63:7a:ee:3d:ff:6b:
c0:64:59:d4:48:7f:fc:de:42:72:a0:ed:b4:5b:cf:
84:5b:6b:72:d1:61:6e:c4:ac:bf:3a:3e:21:9e:8a:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:51:8E:72:12:04:F3:F7:6F:B2:4D:4C:E9:B1:82:7F:47:5B:79
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:d3:3f:6b:2d:c5:c5:16:a0:0d:7e:96:01:be:6d:4c:68:
de:52:b5:b7:63:03:91:31:7f:08:4e:59:91:38:0e:f7:16:61:
54:d5:28:ce:66:27:29:29:3a:1b:5d:14:23:8f:e0:70:74:46:
bc:50:91:80:bb:f9:2f:64:fb:05:84:b0:65:b2:b4:e7:6e:bb:
c1:66:ad:70:bb:c3:1c:ea:f5:19:7e:3e:92:36:26:66:19:58:
72:c9:13:7c:42:4b:6b:ab:f6:44:8b:b0:e7:01:8f:4c:57:32:
76:42:9c:f5:57:3e:b5:ab:7f:82:85:d0:9b:3a:80:af:02:5f:
04:a9:1b:7b:53:94:5f:19:3f:76:86:1d:12:85:d7:a9:92:e2:
a1:45:ca:3f:14:9d:9d:78:78:c9:7b:12:2b:61:11:4f:e2:56:
36:23:e9:14:cb:78:36:bf:c6:d7:8f:58:dc:8c:6b:c3:28:a1:
02:a9:aa:b2:4c:4a:31:2d:5e:bc:c1:1f:e9:db:f2:06:4e:45:
5c:68:5b:f8:1d:fc:f7:0a:fc:fb:72:ff:ff:ea:59:91:f5:f4:
cf:07:c5:a6:dc:07:44:08:e7:17:22:3f:be:1a:90:e0:b7:fc:
08:45:4f:43:10:3b:5c:ce:c8:b0:77:e2:b6:aa:7d:7b:b2:8d:
15:69:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:45:56 2025 by rpki-client