Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: BJJi2fNIjSsdZh1rFYGaabitGiNOAf09tgmCO0SUVZ4=
Subject key identifier: 33:47:E3:0C:7A:EE:90:32:BB:03:0D:E4:92:ED:0F:52:97:62:5C:4F
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 0196BDB706AB2AF623BAB702AEB7F6AABA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 05:00:10 +0000
Manifest this update: Sun 11 May 2025 05:00:10 +0000
Manifest next update: Mon 12 May 2025 05:00:10 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: BJ/Gx+mwjIuQU9A4WPXdB8LtD3PYq77wIf7mJ0AitzE=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:06:ab:2a:f6:23:ba:b7:02:ae:b7:f6:aa:ba:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: May 11 05:00:10 2025 GMT
Not After : May 12 05:00:10 2025 GMT
Subject: CN=3347e30c7aee9032bb030de492ed0f5297625c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:3c:10:e8:2f:a9:72:95:ce:dc:b9:58:0f:
bd:52:ce:c1:23:ed:4d:b9:11:e6:08:0d:40:71:19:
6f:dd:87:79:ab:4a:17:25:e5:b4:dc:ac:e8:50:d3:
19:b8:33:c9:65:cc:b2:26:a0:92:10:09:48:a6:ba:
3a:65:fa:56:35:23:8b:07:8c:8a:a9:f1:7f:77:6c:
13:14:0a:b8:40:38:ab:77:b5:4a:bb:7c:0b:2e:48:
ba:e0:65:bc:20:b3:49:23:c6:e1:4c:80:ca:a4:24:
b3:9f:e5:d9:e0:47:ca:e1:15:d0:8f:57:36:04:59:
cd:79:44:85:31:85:6f:f8:52:a7:71:25:c1:31:1a:
47:7e:fc:ac:7a:9b:ee:13:d1:b2:c8:52:a3:c8:ef:
3b:dd:fb:3f:c0:d8:fe:5c:5b:a4:14:ac:58:5c:31:
1c:bd:c4:f1:38:6c:af:03:bb:ec:dc:83:c3:15:2d:
95:77:10:94:fc:e4:fd:ea:f8:ac:28:d4:f5:56:ac:
54:ac:ef:68:0b:fb:4a:bc:90:3d:f5:18:50:85:c1:
9a:b8:25:20:4e:a0:d5:c8:cc:f1:50:4a:d0:64:a3:
73:6f:a9:ac:87:d6:5c:4a:10:91:a9:e1:f3:49:f6:
06:9c:40:8f:a3:d4:25:db:2a:01:ec:c3:cb:4c:e1:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:E3:0C:7A:EE:90:32:BB:03:0D:E4:92:ED:0F:52:97:62:5C:4F
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:29:14:9f:82:a7:2e:02:9d:7f:fa:21:8d:99:66:42:ea:
8c:cc:89:a8:b1:51:a6:ae:65:76:eb:15:f2:fb:08:5f:4f:e8:
d4:11:3d:0b:69:c4:c1:36:ef:9a:5a:e0:bc:ae:08:33:90:2a:
4c:77:d7:b1:8b:4f:8d:8e:e7:39:a1:4e:97:4f:c3:fc:fe:63:
41:8b:b1:af:c2:c6:84:e4:af:2b:b6:2b:ed:82:9e:b7:98:8c:
f3:66:5b:1d:8d:b4:04:9f:ca:e6:1d:db:85:1b:6d:ae:f9:55:
77:8b:ce:08:5c:05:3a:00:68:59:fd:0d:31:ad:7c:1d:99:bf:
c6:79:d2:2b:0b:ba:6c:b6:57:ec:89:24:68:b4:e0:31:df:dd:
53:fc:10:6b:39:ee:45:60:bd:e6:0d:e7:c5:9a:e4:e8:32:dc:
c0:17:e1:96:15:39:04:dd:7a:9d:c3:75:bf:07:ee:d4:5f:75:
f2:13:d2:01:62:5f:ca:d6:f6:cc:2c:30:e4:99:95:e2:4e:00:
94:6a:93:2d:c1:7f:ed:2f:69:d8:3c:b6:41:37:e2:42:e2:fe:
b4:69:60:8b:44:b7:c7:3f:b7:48:08:cc:bd:51:82:03:1a:05:
72:8b:de:9e:c7:2a:9b:ea:81:f5:d3:c6:a6:06:28:f6:db:a1:
90:b6:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:04 2025 by rpki-client