Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: KxLWkzPFSMoU8X3jfVDCN077IeV/mn78PvsSRieSLsg=
Subject key identifier: ED:31:3D:33:7A:F7:4F:5B:F7:F6:D9:1C:05:B1:62:0A:F8:AB:78:67
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 0196C3B99A4B0BBFBF77264775D539F310EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 07A1
Signing time: Mon 12 May 2025 09:00:42 +0000
Manifest this update: Mon 12 May 2025 09:00:42 +0000
Manifest next update: Tue 13 May 2025 09:00:42 +0000
Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: Is0zbicT8lMNRp6+jMbDO+utnwZniQ6S7dwtIeL8fOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:9a:4b:0b:bf:bf:77:26:47:75:d5:39:f3:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: May 12 09:00:42 2025 GMT
Not After : May 13 09:00:42 2025 GMT
Subject: CN=ed313d337af74f5bf7f6d91c05b1620af8ab7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:bf:0c:fe:5d:e9:7c:90:ea:14:8e:60:df:
3d:a5:0d:b2:0c:42:bd:85:cf:c7:fc:75:35:c7:f2:
b6:8a:ae:4a:94:45:19:ac:6f:49:a2:b8:53:a2:d5:
75:09:ad:56:dd:53:bb:9d:3b:7f:47:34:4e:d8:f9:
a5:b4:75:df:8c:46:c0:94:c9:d6:41:f7:94:43:df:
a0:0a:ff:a6:31:ad:8f:c7:e4:f9:16:3a:3c:62:ff:
62:ea:4f:7a:1f:6b:a3:5d:e8:87:21:a9:f4:5d:f7:
bc:e6:a8:29:ae:13:f2:c5:bc:67:f1:f1:51:50:0e:
b6:21:c8:60:ca:58:cb:42:f6:82:5e:e2:4b:e2:e7:
4f:38:d0:f6:e1:b5:0b:05:5a:25:ca:74:8f:4e:7f:
0a:0e:8a:e3:6b:68:6c:e7:23:fd:ed:6a:51:76:a4:
46:39:2e:f3:8e:68:b0:5e:06:4d:cf:8e:8b:88:c2:
a0:a0:67:8d:b5:29:14:d0:f4:c4:1c:2f:69:7d:08:
c7:9f:ce:0c:b7:6d:6d:c6:0a:87:8f:0b:f7:18:f6:
e2:a2:8b:8f:5b:2b:62:c2:77:97:8c:0a:f4:2a:f3:
e2:da:27:b9:ac:81:bc:be:ba:bf:0b:47:0a:90:7d:
ee:9e:af:70:4f:b5:4b:27:95:4b:9b:c0:1f:02:9e:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:3D:33:7A:F7:4F:5B:F7:F6:D9:1C:05:B1:62:0A:F8:AB:78:67
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:c7:d5:df:43:c9:d7:2a:73:72:b0:9f:84:16:be:21:23:
9f:69:5c:2f:c2:c0:19:81:86:2b:7a:f2:f9:c3:75:5c:a8:15:
30:7e:dc:a8:50:58:f7:22:01:63:2d:c7:cd:d4:6b:39:c6:53:
47:29:74:6e:04:cb:a5:9d:6b:73:a1:cd:98:4a:e2:7e:2b:2f:
9d:fe:e2:74:f1:36:2f:fd:0b:c1:cc:cc:34:5f:fc:af:bb:f9:
3b:ee:3f:12:0d:f7:7c:96:ed:0c:ad:4a:ea:85:f0:ee:b9:24:
c6:a1:51:1d:39:53:75:1a:96:86:f1:23:70:54:a6:0c:3d:0b:
71:e7:f8:a3:93:eb:e1:c6:85:60:53:a4:f0:d8:32:60:b1:1a:
52:00:3b:70:be:43:2f:95:6d:42:04:2b:b9:8e:dc:e4:3b:8b:
00:0a:a7:d2:a7:05:9c:0c:41:03:33:4c:f3:f3:65:8f:44:0d:
f3:6d:d9:bd:ee:63:31:d0:cb:8a:2c:a5:c1:a2:6c:89:b0:98:
6c:21:7f:57:64:a8:4f:6f:43:63:28:97:06:32:bc:ff:79:90:
d3:0b:e2:e8:03:35:d9:95:fc:d4:6f:12:b4:0b:b4:89:98:08:
fc:a5:e9:32:2d:5b:96:11:5f:a0:26:e7:07:e1:59:be:06:1e:
21:91:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:44 2025 by rpki-client