Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: S45NJImDtMUdLrCzwhj62lYQ79t2A7VOaR/vlXya80o=
Subject key identifier: 64:D9:B1:1F:97:F4:4A:D7:E6:42:B8:05:B0:C0:D4:14:80:B8:75:50
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 01969F0830B055F9981A528AF3D39F342DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 04EA
Signing time: Mon 05 May 2025 06:00:36 +0000
Manifest this update: Mon 05 May 2025 06:00:36 +0000
Manifest next update: Tue 06 May 2025 06:00:36 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: Me+FR7OcP4k5ArGFDuOK9sMDLMCN4BI0lKUFGpIfQLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:30:b0:55:f9:98:1a:52:8a:f3:d3:9f:34:2d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: May 5 06:00:36 2025 GMT
Not After : May 6 06:00:36 2025 GMT
Subject: CN=64d9b11f97f44ad7e642b805b0c0d41480b87550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:90:6d:43:f5:6e:eb:37:d0:16:99:4a:4f:
b8:4b:e8:79:fa:c6:5d:41:f9:91:af:a3:08:99:8a:
75:53:d1:9c:79:5b:30:e4:79:7e:fb:38:0c:62:7b:
5b:24:af:ae:a7:93:86:f3:c5:80:62:04:03:76:68:
9b:24:61:69:4b:b8:58:ae:98:5d:39:36:72:b4:c9:
3c:10:8d:b9:17:5c:b0:3f:32:7f:3c:5c:12:91:e0:
8a:8e:29:16:ee:85:1c:5a:4d:c7:c1:a9:23:a7:36:
2c:01:72:c5:65:fe:f9:16:f4:3a:80:95:f1:fe:49:
e2:01:46:68:ac:ae:09:67:b7:73:ce:91:a6:d4:ee:
f7:2e:0a:f6:90:d3:c7:c4:b0:a3:2c:11:e2:5d:29:
bd:b4:5a:60:ec:3c:d9:f5:ea:ac:d0:58:d7:19:b6:
a3:f9:23:76:21:78:44:9f:2d:34:b8:3d:ed:4d:65:
df:e7:63:7f:e2:f0:c5:15:3c:ee:0b:41:74:20:5c:
5f:e6:55:7e:c5:a6:0a:e2:54:1e:ec:31:63:a9:26:
23:5f:90:d4:bb:5b:12:b5:2e:b1:6a:bc:87:32:4a:
8d:a9:a6:59:7a:dd:7e:01:51:bc:01:48:6a:fd:4e:
bc:eb:c1:a0:40:9e:9d:15:1f:bf:df:a8:0a:9e:f4:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:B1:1F:97:F4:4A:D7:E6:42:B8:05:B0:C0:D4:14:80:B8:75:50
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:d1:8a:29:43:e3:a8:8e:b1:3f:07:50:d5:e6:ca:3e:c9:
1a:9b:cd:7c:30:c7:5e:a9:fb:aa:1a:e1:55:f3:39:44:29:e7:
5a:ea:a1:b5:cc:86:3f:35:10:16:38:04:19:82:eb:b4:27:64:
92:b3:07:a6:be:d6:ea:f1:58:cf:c2:33:59:0b:c8:2b:a5:79:
6f:db:9e:3c:61:3f:81:4c:00:b0:45:68:68:cd:48:f1:f8:04:
09:62:f0:64:67:dd:7e:52:ba:81:bd:6c:79:18:c6:d7:1c:e4:
5b:ed:78:70:dd:e7:aa:84:a0:ef:77:32:eb:aa:2c:b1:83:5a:
b0:2a:c9:78:30:44:33:ae:60:64:8a:62:e0:a3:f6:a1:d8:47:
cc:0e:94:3f:04:44:fb:6a:74:90:00:70:8f:ec:47:ca:af:19:
d2:ee:fd:87:0e:c0:35:84:79:bb:c8:f5:9b:3f:07:b2:e7:40:
09:f0:29:42:5e:c2:4a:56:04:42:d2:cd:ab:e2:ed:68:d7:36:
20:5a:25:1a:78:5f:5f:1c:f4:f9:71:dd:c3:3b:2a:df:c6:83:
24:46:28:46:cd:34:cc:16:20:91:43:94:15:fb:c7:3f:bf:91:
16:16:20:01:1b:29:89:88:ed:b2:8a:58:c8:5e:dc:d4:b7:7b:
1a:2d:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:26:42 2025 by rpki-client