Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: PF3VbflvEBXFq5md4QhvvpMDqtjAot6psZrKWzzs1dE=
Subject key identifier: 3A:4E:74:60:43:FB:5D:1B:BF:5C:F1:DB:4E:3C:ED:30:CE:0D:07:A2
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 0196A2E4A2D8C4759410F3566ADC6BCA3DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 0FFC
Signing time: Tue 06 May 2025 00:00:14 +0000
Manifest this update: Tue 06 May 2025 00:00:14 +0000
Manifest next update: Wed 07 May 2025 00:00:14 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: 3NqpgdtbwlAoeAXgkAEHje4Tg6Sv1W3EbE0TAO4GYt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:a2:d8:c4:75:94:10:f3:56:6a:dc:6b:ca:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: May 6 00:00:14 2025 GMT
Not After : May 7 00:00:14 2025 GMT
Subject: CN=3a4e746043fb5d1bbf5cf1db4e3ced30ce0d07a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:bf:eb:e2:78:7b:3b:f2:b7:18:1f:ea:d2:
71:87:b0:00:96:9d:d7:de:e8:70:27:da:fa:68:7e:
82:c2:ab:c1:b0:fe:c3:fd:fd:c8:16:96:59:0c:63:
23:e4:71:61:29:bb:b4:8a:a6:eb:4c:3b:8f:ec:41:
a2:00:d1:9d:0d:aa:7f:5a:bc:41:1a:41:8a:de:8f:
93:c8:81:f5:a3:0a:fd:90:9c:e4:71:5d:b2:de:b4:
b0:ab:23:9b:86:22:98:01:9d:c2:a9:5e:e9:e9:51:
f4:4f:68:a7:2f:ef:00:6a:64:b2:7e:1c:99:62:dc:
e5:b2:50:4c:d8:1f:98:20:5e:91:04:49:af:9b:31:
12:a4:9f:67:b7:48:66:5c:26:23:36:30:11:d7:b6:
2d:07:74:7d:4f:cf:9f:88:76:17:0f:8c:2e:90:00:
98:1d:4d:4b:bc:7d:f9:21:ac:ff:22:07:38:21:60:
8c:67:ba:98:7b:54:71:08:a4:48:51:8f:e2:08:b2:
a6:53:9e:b1:27:87:05:d2:dc:0b:fb:2e:77:02:76:
21:5e:47:4a:e5:c4:8c:97:c2:1a:b2:a0:2e:49:76:
f2:d3:f8:96:c5:94:f0:46:19:f9:25:3f:04:60:e4:
c2:c1:73:00:3a:cd:b2:98:15:1a:be:da:3b:7a:ee:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:74:60:43:FB:5D:1B:BF:5C:F1:DB:4E:3C:ED:30:CE:0D:07:A2
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:b9:cd:e2:d0:84:29:6b:7c:72:77:f3:0e:ce:70:51:e7:
2e:5d:ef:16:3e:eb:bb:dd:3c:61:ad:9a:46:0d:6c:0e:74:b1:
72:d7:81:c6:02:75:e4:6c:39:cb:8f:c6:c0:08:e2:b9:ff:77:
5b:1d:bd:88:b4:97:f6:30:8a:67:9b:21:f6:f2:0f:04:e6:5f:
04:5f:96:b3:a6:04:ce:60:fa:68:2f:3c:19:ab:31:2d:fb:86:
03:6c:29:4f:55:51:04:86:58:d8:4a:94:18:09:a6:c7:26:40:
bf:07:2e:eb:85:32:4f:c4:bc:16:84:5a:e0:c9:32:a2:20:4d:
55:22:4f:a4:43:9a:f6:ee:36:6e:ac:8d:2d:27:53:e1:e8:2a:
27:b2:23:be:2a:25:c1:af:fb:df:57:5d:16:db:fe:31:03:05:
5c:74:73:e1:75:58:cb:17:a3:24:23:7e:e2:27:4a:e8:5e:37:
24:08:35:a8:a3:6d:e9:52:56:ae:ff:63:de:34:e1:3b:59:a0:
a9:a3:2b:fb:0b:81:e3:c6:71:b2:d3:56:28:c5:6d:5b:cc:b7:
cb:1f:7f:bb:77:10:ef:dd:c0:6a:57:d2:f4:7f:44:7e:db:75:
e7:0f:e8:72:f4:51:f9:4a:0d:26:13:a8:08:9f:df:b9:7e:01:
74:cd:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:56:33 2025 by rpki-client