Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: 3VSHHr8K+yn4Z3MBvdlbkVcNjv/ct+s9YvmNW/9f3dw=
Subject key identifier: CF:A7:F7:1E:8E:14:A4:F3:5D:EE:66:9E:48:0C:DF:4C:18:A6:47:0F
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 0196B258257ED83BBE8346CE36B9F91A4D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 00:00:43 +0000
Manifest this update: Fri 09 May 2025 00:00:43 +0000
Manifest next update: Sat 10 May 2025 00:00:43 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: DHRmTvGvnBGbnZk2EHAa1eW0k9JhPbzyACl4+EBui6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:25:7e:d8:3b:be:83:46:ce:36:b9:f9:1a:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: May 9 00:00:43 2025 GMT
Not After : May 10 00:00:43 2025 GMT
Subject: CN=cfa7f71e8e14a4f35dee669e480cdf4c18a6470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:76:8c:b4:ea:57:a4:0e:98:3b:d4:0c:72:
87:0e:ac:ce:29:9a:90:38:43:48:cc:04:4e:bc:32:
59:f7:bc:d3:28:d1:ea:c6:c2:83:46:7d:64:b0:b7:
12:65:20:d5:e2:70:a6:f2:5c:20:43:87:64:2d:61:
bb:1b:77:bd:e2:5b:bc:f8:98:18:4f:b7:4f:c8:31:
14:29:4e:13:10:a2:ab:7c:20:07:9a:e1:84:63:59:
21:b4:d6:4c:40:58:14:c5:02:a6:8b:c6:6c:37:ae:
2d:13:cc:fc:da:e3:94:6f:42:18:2f:64:59:14:0d:
a0:43:1c:66:5a:f4:76:32:68:76:db:a9:40:1e:ed:
16:1f:bd:0f:c0:f9:6c:dd:72:cd:a1:d1:07:66:0d:
10:94:3d:47:db:ae:3c:3a:16:19:9c:3f:b9:6a:cd:
0a:70:71:65:85:56:a0:0f:a7:1e:bc:38:70:05:f0:
ca:ca:12:c7:d4:29:0f:18:9f:4c:04:b0:23:08:66:
1f:a5:04:a5:d6:ce:b5:2b:cb:57:3c:1e:dc:50:e2:
d1:0f:82:29:cb:8d:49:38:80:4a:f6:e3:e6:fe:7d:
4e:27:17:b7:22:e6:c3:86:fb:4c:fb:e8:40:99:7a:
54:63:4e:ce:a0:dd:bf:0a:f6:e2:4b:2b:b0:4f:c0:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:F7:1E:8E:14:A4:F3:5D:EE:66:9E:48:0C:DF:4C:18:A6:47:0F
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:bf:7d:de:59:a8:bf:3e:eb:b8:62:e1:3a:49:ea:de:64:
79:48:62:2c:98:65:fe:b5:6a:23:6b:ca:24:ff:e0:e2:4a:ca:
05:50:dc:67:a0:af:19:b7:4d:b4:88:db:12:85:b4:22:ef:f7:
98:35:9f:d1:05:ca:96:13:3f:cd:99:4c:05:25:f8:84:8b:9f:
5b:f7:37:19:db:42:a6:55:70:1c:10:cd:6b:70:6b:d6:2f:e9:
1f:75:7f:4e:f8:0f:fc:ec:82:28:e8:76:81:50:4d:10:c4:30:
78:97:c1:df:74:99:1f:a1:02:e6:df:74:48:ce:43:72:64:45:
23:40:66:c2:b7:1f:b2:4b:38:3f:56:83:c4:45:6c:73:80:f8:
df:0d:b5:1e:52:02:01:a2:43:db:62:ef:12:e9:7d:81:db:cb:
58:25:c9:5e:7b:b8:10:56:f0:8f:49:a2:d7:03:5f:03:f8:7f:
ea:30:1e:34:ad:28:99:14:ec:dc:63:b2:55:8c:e9:20:d4:f3:
d6:3a:80:49:5a:4c:08:04:26:90:00:da:be:26:f5:18:17:63:
9a:93:cd:a8:5f:77:25:17:7a:fb:bd:a8:ae:ac:10:9c:5e:a1:
fc:34:0b:bb:9c:e6:f0:56:82:31:4b:14:f3:08:f7:41:b0:2c:
cc:5b:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:11:00 2025 by rpki-client