Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: ufpDl/pYgxJrbG0mhwnS7Ada4M4LAogvsvIrKRrFJkY=
Subject key identifier: F6:8A:05:E4:91:5A:C6:99:08:B7:A3:2B:28:62:F3:E3:76:54:0B:57
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 0196A42EB388A5A2242FAAA2F9860950DE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 06:00:45 +0000
Manifest this update: Tue 06 May 2025 06:00:45 +0000
Manifest next update: Wed 07 May 2025 06:00:45 +0000
Files and hashes: 1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: z/CvD1U7v5g97u2fMYrMJzRfTQ6tRDZHB3nXoGbaO5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:b3:88:a5:a2:24:2f:aa:a2:f9:86:09:50:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: May 6 06:00:45 2025 GMT
Not After : May 7 06:00:45 2025 GMT
Subject: CN=f68a05e4915ac69908b7a32b2862f3e376540b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:b8:68:f7:e8:8e:b3:b5:a0:d8:c2:eb:1a:
6c:54:dc:79:4d:88:1e:aa:95:00:c6:a6:ac:a1:d6:
b1:89:ad:d9:a1:39:51:5f:5d:4b:2d:8e:e0:e5:82:
e3:b5:ca:44:4d:82:d0:d3:39:7a:0e:ed:1d:71:10:
12:ee:a4:35:db:b8:f1:c9:6a:0e:94:c7:d2:97:35:
12:57:6a:ce:b9:86:e7:2b:4c:4a:36:fe:cc:cd:33:
6d:45:aa:52:eb:0b:c2:15:f8:8d:67:d6:1f:cc:1d:
8b:91:e6:98:3a:fc:24:bb:b5:c1:6c:9b:55:9b:00:
46:e7:31:c4:2d:97:19:32:16:e9:31:f7:29:18:0a:
66:fa:ab:a8:23:c7:83:b0:85:b0:41:5c:37:18:7a:
65:2a:bc:ac:f3:8f:91:c9:ae:93:be:33:fe:b2:95:
3e:32:5d:5f:02:c2:44:af:db:8c:6d:44:8c:c6:b0:
84:de:65:e6:25:65:86:58:ae:cd:f5:43:4e:7b:b9:
55:00:fb:c5:9a:6d:3c:9f:56:a6:2c:66:2a:be:12:
6c:7b:f4:6a:b4:96:0c:55:8f:37:7f:cb:c8:be:f6:
36:81:6e:b9:b0:14:e2:0f:12:a0:92:f4:12:67:f3:
df:81:6e:23:3c:c0:a2:15:ea:6b:ae:fa:a8:40:0a:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:05:E4:91:5A:C6:99:08:B7:A3:2B:28:62:F3:E3:76:54:0B:57
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f7:84:c9:a5:ca:c6:8a:ad:94:77:f0:1c:e5:f1:83:be:6e:
b9:d7:a2:e8:af:75:48:0e:c2:fc:19:ef:0c:81:a7:69:89:37:
00:71:1d:de:8d:95:26:be:7b:00:6f:c6:bd:6b:b4:7e:79:9c:
00:1e:a8:42:d7:d2:bb:98:d3:97:d4:a6:76:b8:b2:24:2f:a9:
fa:fe:48:34:50:7d:4a:59:e5:bc:c7:b1:5b:79:4b:c0:6b:dd:
81:a5:c5:d4:6e:30:9e:41:ef:fd:da:04:93:d6:fd:14:d4:5d:
c8:19:15:d9:22:53:76:03:5b:25:48:d9:1c:b5:57:fc:46:d5:
d4:0c:e7:7b:75:15:26:3e:b5:ec:42:33:de:e7:18:b4:e6:ec:
36:9a:22:06:dd:5a:be:d9:23:12:78:5e:c5:cd:e0:98:b3:52:
1b:36:b8:38:2c:e9:64:14:7a:d0:02:08:0f:68:c1:63:7e:e5:
5d:84:0c:68:71:3f:22:7a:c9:be:1f:ee:3c:a6:19:e3:f9:46:
32:ac:f8:1c:45:eb:e2:39:e0:dc:1f:8e:9e:9b:48:9c:46:6a:
ac:a5:df:83:b2:cf:3b:a3:3f:83:2d:a0:4d:a7:8f:b6:1f:c3:
20:ea:0c:87:42:81:49:4e:ef:bd:02:9e:dd:10:7c:db:61:2f:
a9:13:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:33:46 2025 by rpki-client