Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File: VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier: yo4wZCV9KHnEdLz4R+qGOPW3YDy/PB3IifQN4sLqBHE=
Subject key identifier: B9:35:A3:7C:B0:DC:68:31:74:BD:78:3D:60:AB:A5:B0:71:B9:42:2B
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial: 0196A0F6752143ED5D680E28C85711406C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number: 066C
Signing time: Mon 05 May 2025 15:00:28 +0000
Manifest this update: Mon 05 May 2025 15:00:28 +0000
Manifest next update: Tue 06 May 2025 15:00:28 +0000
Files and hashes: 1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: lZHFRFgzgyY/wG6DjAHp9hvJ6aaGAq1R55NNFJeUTNs=)
2: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (hash: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:75:21:43:ed:5d:68:0e:28:c8:57:11:40:6c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Validity
Not Before: May 5 15:00:28 2025 GMT
Not After : May 6 15:00:28 2025 GMT
Subject: CN=b935a37cb0dc683174bd783d60aba5b071b9422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:64:f6:db:75:5a:37:d7:9b:c8:aa:67:78:
6a:e5:93:e6:3e:04:7d:0b:1b:b0:a5:79:bd:61:e9:
75:88:fd:d0:9c:7e:ed:a5:56:21:d9:8d:79:5a:7e:
b9:4c:24:17:4d:d5:30:ad:57:e8:d8:ca:ad:6a:0c:
69:2d:6e:94:f7:4c:57:10:0f:6c:6f:b3:ef:2d:dc:
02:11:c1:25:7d:01:db:9b:7b:fe:a8:c8:ad:67:75:
67:98:c9:42:2e:ff:33:86:4e:08:48:00:11:30:9e:
3b:30:75:94:26:56:9e:f5:ed:93:1e:be:38:f7:8a:
78:e5:5d:22:6e:69:c9:69:00:ee:f6:fa:86:8d:d7:
35:c3:cd:15:f7:ac:2c:45:b5:30:6e:9b:6e:4e:89:
a6:8d:c6:18:69:22:42:02:2c:a6:e5:3e:60:2c:34:
5a:2a:83:3e:a4:3c:08:a8:86:d7:17:9c:4d:f9:85:
74:b0:69:2d:c9:2d:5d:05:40:32:ed:d6:9d:fe:fc:
77:86:96:0b:67:c1:9b:a4:dc:73:7d:99:9f:27:00:
5e:18:31:5a:ea:fb:29:97:35:d7:44:fe:f2:4d:2b:
a3:57:98:4b:24:e5:ad:fa:cc:31:e2:ae:fd:aa:ee:
b1:53:b6:23:3d:60:ea:a9:df:76:9f:05:80:73:02:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:35:A3:7C:B0:DC:68:31:74:BD:78:3D:60:AB:A5:B0:71:B9:42:2B
X509v3 Authority Key Identifier:
keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:79:18:73:c7:85:12:da:70:f7:29:97:f6:81:b4:bb:dd:
19:1e:9c:28:e5:df:73:ad:c8:8e:e4:9e:97:27:55:4f:a4:da:
fd:67:fc:2f:79:69:73:3b:ec:62:36:75:2d:5b:99:ca:91:a5:
fc:b9:15:e8:83:45:e4:a2:f3:be:54:d0:0e:b2:92:78:da:69:
95:24:b9:33:eb:31:d8:00:d6:84:c7:fa:d3:ea:0e:3c:ce:63:
89:7b:f2:0f:1f:07:7c:35:6b:16:6a:7f:2e:b3:78:4c:fc:b6:
ec:fd:0f:47:c6:1a:ee:26:97:bf:0c:66:9d:6d:e4:f1:76:5e:
61:24:95:23:d1:7e:19:98:c6:f6:84:ab:b5:57:8d:c7:65:4a:
b1:43:d3:af:06:01:56:f4:24:c2:39:ba:ab:b0:ff:25:ff:53:
4c:e0:9a:f9:48:23:dc:8d:51:df:dd:6e:de:ef:af:4c:42:e5:
9f:65:57:6d:bf:33:e2:bb:c7:f7:31:f7:e5:7b:57:c5:a9:6b:
a6:b8:9d:f6:2d:0e:d9:11:09:cc:59:6c:e3:d8:45:61:ee:71:
d7:16:48:98:0a:09:3b:20:bf:c3:f4:1f:a9:e3:65:ce:44:7d:
7c:6f:ef:77:6f:85:80:ca:18:5b:a3:61:fe:0e:8e:65:1f:0d:
fe:44:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:43:16 2025 by rpki-client