Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: g2Lc8DOVvAZGl68ni9+z33ZCD6kJ2bYmrH/hKuCVOjY=
Subject key identifier: FE:D8:11:02:4D:C2:08:DC:85:A6:B5:A1:C6:9D:D4:BA:F0:66:48:D3
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 0196C6158DC999661FD9C03FC2DD3B5BA1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0971
Signing time: Mon 12 May 2025 20:00:23 +0000
Manifest this update: Mon 12 May 2025 20:00:23 +0000
Manifest next update: Tue 13 May 2025 20:00:23 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: LgpNj1IlnIM1JkkzolDmSg2kvv3ytJAToZWvcyfoWXw=)
2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:8d:c9:99:66:1f:d9:c0:3f:c2:dd:3b:5b:a1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: May 12 20:00:23 2025 GMT
Not After : May 13 20:00:23 2025 GMT
Subject: CN=fed811024dc208dc85a6b5a1c69dd4baf06648d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:84:c7:0c:af:b1:4b:b2:07:09:27:2b:bc:
72:ae:79:5c:d7:09:61:da:1c:13:98:d1:56:b9:31:
99:fa:fc:66:cf:d3:14:7c:dd:a0:2e:c4:33:4b:9e:
26:a4:05:60:66:63:96:fa:71:c2:3e:5d:a1:7c:2b:
1e:74:f9:54:e8:da:e2:31:59:af:ac:d0:d3:af:3f:
d7:88:bb:c3:69:66:8e:fe:4d:17:e0:be:1d:d2:9e:
2c:7e:bf:0b:af:3f:2a:0c:32:7b:94:c7:98:f6:01:
e5:50:2a:d4:73:4e:24:80:ea:09:d4:64:cd:30:04:
28:fb:4f:6e:70:c6:a2:79:b0:d5:da:f8:10:c6:ff:
93:52:1d:44:5a:40:d9:3b:18:66:d0:7f:c5:03:ab:
26:60:61:11:05:34:35:c8:c2:23:02:ea:bb:0a:a9:
b9:ab:e8:8b:94:e8:43:c2:47:d7:d4:fc:89:cf:80:
5a:1e:46:a1:0e:3e:00:55:aa:7a:9d:92:47:cc:a4:
b7:83:8d:81:d9:ed:52:33:62:b0:41:13:43:f9:60:
60:5f:79:f2:d6:ac:bd:80:7c:46:66:a4:65:96:b6:
1d:13:30:80:1a:10:d9:58:bc:50:c7:51:09:97:14:
e0:33:ea:70:d9:e0:36:4c:38:01:6b:6c:d9:49:19:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:11:02:4D:C2:08:DC:85:A6:B5:A1:C6:9D:D4:BA:F0:66:48:D3
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:ee:7f:77:1c:31:4a:8c:c6:d3:22:cc:b6:22:c4:9e:f5:
c8:08:de:d5:1a:e9:c5:7b:7f:d2:79:96:41:06:ad:87:7d:bc:
b3:25:90:c6:bc:17:35:de:82:e9:a4:99:45:c2:1a:35:f9:ef:
0c:28:26:5b:5b:9d:e5:58:6f:45:0e:3f:10:73:16:c3:0a:48:
c1:6a:78:be:87:54:4c:0e:21:51:9b:55:1e:f3:a0:79:92:a6:
bf:5c:67:4a:cb:a5:f8:0f:0e:6a:04:23:f5:2b:9d:8f:ea:b5:
d6:cb:19:1f:8e:53:f8:9c:4c:bc:0d:31:02:07:af:93:ce:79:
ac:44:98:7b:e5:f8:f4:b4:4f:6f:ab:c2:0a:9f:82:ca:54:1a:
ce:0b:e4:79:35:b1:08:f8:ac:1c:01:05:13:0e:23:9a:44:49:
c8:fd:e8:bd:a9:ef:8f:d8:d3:e0:eb:53:bb:e3:aa:f3:b8:9f:
ba:47:75:be:10:c7:42:f1:d2:af:8a:96:e3:9e:36:b8:f2:4b:
7c:90:d5:04:72:09:ef:a9:70:33:85:b8:95:48:56:bf:48:3f:
a3:33:93:0c:e6:40:af:46:62:27:09:97:3b:cd:80:a2:43:74:
53:17:b5:d0:8a:8b:33:41:17:a2:3b:6b:d3:fa:81:14:8b:d0:
7e:4b:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:49:28 2025 by rpki-client