Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File: vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier: t+ISZnT5KuMC94d25UH1ipPgEZ+nkDq9+gZZ5/5UKJM=
Subject key identifier: 3E:7B:31:78:FD:FB:65:BF:69:F7:B3:9E:BF:7A:CF:D6:B9:91:07:27
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 0196C1945E7E87E6E7629778933F8D7A748E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number: 0EEF
Signing time: Sun 11 May 2025 23:00:48 +0000
Manifest this update: Sun 11 May 2025 23:00:48 +0000
Manifest next update: Mon 12 May 2025 23:00:48 +0000
Files and hashes: 1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: xKL8PP4y2J09/Hs230t4F9mpLVK4BLKzbC//TNDgkR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:5e:7e:87:e6:e7:62:97:78:93:3f:8d:7a:74:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: May 11 23:00:48 2025 GMT
Not After : May 12 23:00:48 2025 GMT
Subject: CN=3e7b3178fdfb65bf69f7b39ebf7acfd6b9910727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:ca:7d:e5:5e:e6:28:d5:c3:c1:69:4c:f2:
45:1b:45:c5:79:de:dc:9c:f1:48:59:2d:b6:bc:79:
0e:f1:5f:c2:da:c8:5a:e9:78:5a:d4:9f:a4:2a:22:
33:4e:49:64:7f:26:1c:5a:2c:83:ad:cc:3e:f2:f9:
08:30:41:48:4d:4b:03:7b:83:7d:b5:a5:d3:ce:e3:
83:df:2f:ae:aa:ef:2b:4a:f0:dd:ba:be:72:a8:eb:
d0:ea:da:bf:69:06:27:79:59:fe:ea:cc:3c:f2:5f:
33:02:9e:01:09:eb:ab:ea:1f:28:40:be:de:5a:5f:
5f:e1:46:9e:ba:df:92:e2:9b:b3:5b:e2:43:6e:c3:
55:27:da:e7:25:c8:da:f1:45:f5:97:be:f9:31:99:
d2:24:c4:d5:a0:d3:7f:eb:06:ad:4e:51:ab:75:0b:
da:56:e4:ec:58:ce:4e:76:52:0d:d5:f0:32:98:43:
dc:fc:1a:fb:ca:68:1f:2a:3c:42:3e:ec:80:89:19:
72:df:83:9b:cf:e4:bc:2e:d6:0b:fe:c0:34:8a:04:
3f:9e:dd:b3:e3:bb:b6:cf:72:66:34:6b:73:ca:95:
b4:f0:00:6b:67:bc:50:e7:e1:fe:04:94:9d:31:56:
89:28:dc:6f:84:a5:6e:d6:cd:27:bc:fc:71:d8:f0:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:31:78:FD:FB:65:BF:69:F7:B3:9E:BF:7A:CF:D6:B9:91:07:27
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:85:3d:5c:14:11:62:34:51:c0:c4:a0:56:df:a2:d6:6b:
11:ba:47:b0:5e:bd:f7:1f:4a:61:5d:94:4a:2b:dd:e8:60:50:
57:a2:a4:1c:7c:1c:90:b6:23:22:9b:a1:2c:28:db:7b:1c:69:
72:3e:78:0c:36:bb:a0:18:c9:ce:1f:64:bf:c2:7c:8e:f2:34:
d9:b5:d2:cf:ca:ea:8e:c8:ba:f6:55:dd:86:6d:c0:f1:f5:af:
d4:33:f9:6b:5c:35:10:8b:6a:ef:a9:f9:6b:0e:31:65:09:29:
0f:b8:0c:5a:65:aa:e2:03:89:5d:da:59:cb:c4:45:06:bd:ef:
3b:d8:9c:4a:d4:0a:6c:0a:4d:ae:9e:5e:24:21:18:7b:ed:bf:
fd:3c:54:5e:9b:e6:2d:23:1b:14:26:56:e5:6e:04:4b:d3:58:
7f:cf:38:42:18:c7:52:92:c8:23:d9:92:f9:51:23:80:6d:c3:
1d:de:dc:38:cd:16:eb:74:c0:8f:d9:63:5b:62:9c:4e:3b:46:
46:0b:6c:28:50:0a:f5:20:8c:e1:47:8b:1d:0f:97:a8:83:22:
51:63:17:0b:45:e5:ad:0e:26:ad:5c:ca:e2:ba:d8:85:54:f1:
5d:00:b2:29:3d:6d:8a:7b:8b:7b:90:08:b3:1c:40:23:75:7a:
47:9a:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:53:27 2025 by rpki-client