Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: eGc4N2QSzoswKewTQVNuEC6tDWl8mwbOMHlB9+LaOVI=
Subject key identifier: 84:01:61:00:0F:63:EF:86:7A:3C:72:54:D6:82:2D:CF:0A:58:FE:95
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0196BAB6743062EF06D706EA632B6C7F4514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 153B
Signing time: Sat 10 May 2025 15:00:41 +0000
Manifest this update: Sat 10 May 2025 15:00:41 +0000
Manifest next update: Sun 11 May 2025 15:00:41 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: tPdNz+4i2iYYHhbLZ305DGe4aNs/TE/265/zyg5Vv9o=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:74:30:62:ef:06:d7:06:ea:63:2b:6c:7f:45:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: May 10 15:00:41 2025 GMT
Not After : May 11 15:00:41 2025 GMT
Subject: CN=840161000f63ef867a3c7254d6822dcf0a58fe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:fc:9c:e2:dc:b2:0f:f8:4b:7a:e5:ea:2d:
4d:35:09:ce:7a:d5:92:32:dd:33:ee:5c:e8:ee:c0:
c1:db:f7:d6:68:80:42:18:de:58:73:55:52:ef:32:
81:8c:39:18:db:82:e8:9d:f3:44:c2:56:c1:1d:b8:
db:a5:32:30:c3:28:5b:53:8c:33:90:0b:a3:8a:86:
51:f8:18:f5:e8:5f:79:16:e2:c7:10:93:83:6d:73:
79:41:80:4a:0f:b2:10:fa:32:f6:33:00:2d:59:b8:
62:4c:d3:71:e3:dd:db:11:7f:02:bd:1b:ce:03:de:
74:4c:00:40:cd:7d:ad:ec:35:b1:5c:4e:39:4f:c6:
11:72:34:a9:07:e2:c5:43:81:a3:37:a6:ba:71:ab:
92:7d:4e:c4:d0:99:18:b9:25:cc:f6:de:f7:6a:c6:
74:dd:ea:43:73:52:e5:b6:f3:a1:3e:7c:f9:da:70:
a4:67:a6:35:3c:41:08:53:d2:07:ab:f2:8f:a5:09:
87:dc:9f:9b:b8:9a:7b:29:54:cb:af:f3:41:fb:be:
b7:62:fc:2b:09:64:3c:08:16:a6:58:b5:ae:b8:f2:
eb:fb:2e:6b:4c:77:14:3a:68:7e:5a:3e:84:a3:48:
11:1d:88:46:30:a5:60:a4:80:97:2f:8c:03:06:72:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:61:00:0F:63:EF:86:7A:3C:72:54:D6:82:2D:CF:0A:58:FE:95
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bb:5b:e6:50:af:f6:58:ef:b1:8c:7a:cc:85:9d:50:b6:0f:
2c:d7:7b:40:ac:bd:53:54:f4:5e:cf:84:e4:29:c4:27:d8:06:
f5:98:81:dd:c6:7e:13:90:4f:65:4d:11:bb:a0:ea:db:7b:71:
58:4d:e6:13:81:d1:19:d0:58:82:79:2e:50:29:05:ad:9d:3f:
71:25:2b:5a:b6:d0:a4:54:ab:16:16:01:9c:3a:9b:05:d3:a2:
25:e8:ef:93:aa:49:e7:b7:47:cf:d5:69:f7:16:b3:7b:58:9a:
fd:cc:d8:23:de:66:c8:fd:2d:37:96:3b:a0:06:e4:f7:3a:ce:
b4:7d:df:78:4d:c3:36:4b:dc:e5:c3:5c:f8:02:11:58:15:43:
8c:82:82:68:15:f3:62:67:40:f6:38:f8:b4:05:e8:2c:bd:c1:
1f:1a:11:0f:16:73:4b:b3:4b:1c:28:be:1a:7d:f1:46:82:5d:
87:15:7c:eb:6d:a2:6d:8a:05:a2:d0:8c:80:e0:9f:2d:04:ba:
94:80:70:94:ce:bc:16:9a:d5:be:d9:73:74:c1:c2:7a:f0:d0:
68:a8:d6:92:8d:e5:b7:d5:9b:4c:bb:28:56:04:1f:c3:54:6d:
ea:75:21:eb:9b:9e:07:6e:1c:0a:bf:70:27:b9:19:ad:6c:32:
95:b5:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:00:53 2025 by rpki-client