Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: /mvqwCJS8K5BDKpz+5rGVdmAPLS992v+CtAvKDodWGs=
Subject key identifier: 46:E3:69:72:7E:DE:3E:88:AD:D4:CE:65:A1:9F:F4:07:56:DF:8A:C8
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0196C201EAB620B3C423FE88C1531401952C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 01:00:27 +0000
Manifest this update: Mon 12 May 2025 01:00:27 +0000
Manifest next update: Tue 13 May 2025 01:00:27 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: zWcWEjsq91MDKU4Kx0GiOJXwiiQM218XRi83CYDsEpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:ea:b6:20:b3:c4:23:fe:88:c1:53:14:01:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: May 12 01:00:27 2025 GMT
Not After : May 13 01:00:27 2025 GMT
Subject: CN=46e369727ede3e88add4ce65a19ff40756df8ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:b4:10:6e:f6:85:1f:74:33:11:af:06:4d:
a0:85:44:c7:65:55:4d:30:43:60:a9:5d:dc:c6:df:
7a:ed:6f:01:92:f2:75:3b:f2:1f:07:c0:ec:68:64:
b3:e5:97:4b:1b:de:bf:3f:4f:48:73:f9:df:29:63:
6f:ae:a5:87:c3:55:8d:eb:10:57:90:c2:69:50:bb:
cd:52:08:d6:a3:d4:8a:2c:60:5b:bd:68:a8:ab:7f:
d8:b2:e6:ed:35:23:7f:5a:b6:8b:89:e8:20:14:c7:
09:cc:38:22:05:24:7b:5d:9a:d9:1a:32:32:d5:6e:
9a:04:1c:37:84:3e:39:b9:85:ef:09:90:48:7f:89:
cc:4d:70:5c:84:b2:8c:04:1e:5c:a2:67:da:34:0f:
48:44:1b:ce:60:bc:64:bc:66:3e:2c:a2:14:3d:26:
68:03:70:12:bd:6a:22:b8:9b:4a:a1:64:f6:46:10:
16:b0:fc:ef:05:3a:01:ff:b1:9b:2d:28:82:a8:34:
c1:61:83:de:76:5f:d0:0b:43:29:cb:f3:f7:d0:aa:
4c:99:2e:f0:d8:66:05:d2:f7:16:f4:01:23:53:70:
fb:54:20:98:84:b4:94:60:b3:85:b3:48:3b:4c:f1:
bd:0c:f1:37:19:08:bd:ca:ae:55:3f:35:2f:2b:13:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:69:72:7E:DE:3E:88:AD:D4:CE:65:A1:9F:F4:07:56:DF:8A:C8
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:21:0f:7e:06:91:c8:72:ab:0e:da:d0:d4:75:bf:94:f6:f3:
a7:99:c8:42:54:53:44:e1:7c:d6:d1:c7:b0:12:77:e3:c1:1c:
62:37:43:27:aa:1e:c1:07:aa:2c:63:8f:b7:88:86:94:ea:9e:
3a:a8:75:a9:20:51:b5:0d:b0:0a:d7:0c:58:2c:6d:0b:35:f9:
36:44:2e:ce:3e:28:6d:47:5b:94:f7:5c:5c:ff:ec:8a:b2:7c:
c9:f4:a3:82:9d:45:e6:80:52:71:80:65:91:67:d5:f0:e7:39:
28:ff:51:ee:b1:1f:e7:2c:ef:cc:5f:e8:5b:45:4c:bc:75:d1:
0c:db:9b:cb:55:e1:2c:41:43:63:1d:80:7a:8c:d9:19:3a:c1:
86:a2:b5:4e:b2:c3:e0:73:c1:c6:02:df:b3:e7:83:24:a2:2f:
da:16:05:a1:1e:28:c6:36:c1:6b:97:b3:42:24:9f:09:6b:0d:
af:ef:0c:59:1d:e9:b5:4a:15:92:98:82:9f:8e:e5:b2:5f:31:
d3:b8:7e:ac:fe:27:cc:ed:6f:b2:45:fd:f7:7b:0c:36:7d:97:
b9:a8:a4:86:4b:07:b9:a0:14:bd:f9:f6:d3:e8:65:0f:42:25:
c0:15:bf:f6:6b:00:f8:c4:5d:d8:f5:41:30:a3:7b:e3:74:ea:
e3:9a:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:12:09 2025 by rpki-client