Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
File: vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json)
Hash identifier: KyVgm38t1zLzSMQtOpjiLc1+UdpaAI1tTk5fTlFr5SQ=
Subject key identifier: 9C:C6:57:D0:CB:1F:BA:DC:03:F6:3C:A4:D7:DD:5A:59:5F:A5:12:BE
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 0196C081B989AA54AE9CEE14BAED2E6F723D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
Manifest number: 0EA3
Signing time: Sun 11 May 2025 18:00:49 +0000
Manifest this update: Sun 11 May 2025 18:00:49 +0000
Manifest next update: Mon 12 May 2025 18:00:49 +0000
Files and hashes: 1: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (hash: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=)
2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: g/0Cam0XG4VdlPn2STpicINhgi1n04aVzogzfFFzCdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:b9:89:aa:54:ae:9c:ee:14:ba:ed:2e:6f:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: May 11 18:00:49 2025 GMT
Not After : May 12 18:00:49 2025 GMT
Subject: CN=9cc657d0cb1fbadc03f63ca4d7dd5a595fa512be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:fd:e8:37:30:b3:f2:0d:e1:fe:6f:79:aa:
0b:4b:56:68:7a:f9:7f:a7:57:ef:7e:72:01:3e:e2:
2c:57:fa:47:5b:4c:87:90:49:e1:78:a9:7c:df:c8:
0a:86:92:4e:15:e0:34:36:22:67:ce:98:d3:fb:14:
2c:59:e8:cb:24:0e:bf:6e:b8:5f:79:fc:c4:fb:26:
d3:8e:9a:3f:b5:7c:df:3f:51:2c:a2:ec:ff:48:22:
32:0e:a7:5e:3a:86:cf:03:8c:34:f8:45:2d:fd:5d:
4d:6b:e9:eb:fc:13:2e:74:ef:22:80:9a:ff:b9:df:
1c:f6:1d:d3:df:0a:71:b8:13:c3:5b:a7:ee:d2:5b:
bf:4c:08:af:20:77:67:fe:e7:e2:d7:56:b2:90:c0:
78:9d:20:33:8b:55:74:ae:a1:61:cb:4e:21:4d:94:
b3:cf:00:28:a8:09:cf:d8:c3:6a:38:ec:f4:ac:ea:
81:99:7f:a8:8c:82:e7:3b:8d:12:ca:86:6e:e4:03:
3f:d5:94:ff:2a:23:b3:e2:89:88:05:51:ee:15:82:
05:6b:fb:42:fc:b2:d8:f9:2b:47:3f:db:94:a6:ac:
1a:c1:9f:ff:b1:1d:d5:67:75:26:09:0a:02:b0:b3:
88:e7:c8:cf:87:99:45:81:34:d6:91:23:73:ae:bb:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:57:D0:CB:1F:BA:DC:03:F6:3C:A4:D7:DD:5A:59:5F:A5:12:BE
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:6e:aa:9b:7b:b9:4a:af:a3:ad:f3:c6:d8:46:51:71:07:
6a:e5:1a:5d:a1:d3:f0:cf:4c:ff:c4:5f:36:2b:87:8a:12:86:
89:09:9f:66:e2:dd:c4:f7:21:b7:c7:69:59:ef:59:b5:c4:98:
f0:60:ba:70:b3:b8:94:f5:b5:ed:69:af:3d:dc:c0:63:ac:55:
0d:a4:0d:41:57:47:70:31:e6:e6:59:c6:42:ec:79:02:48:cb:
8f:ed:a8:08:d6:a4:66:5b:95:e5:45:08:61:cc:49:e3:e7:63:
78:ec:f1:60:32:5d:f1:71:74:49:71:eb:ed:29:28:3c:fe:5e:
bb:f9:06:04:42:39:78:36:34:4a:f2:4d:ab:1f:9d:72:c9:b2:
c3:5e:ce:7f:f2:33:7d:9c:fb:81:40:94:7f:bc:ab:e6:c8:4b:
cd:66:82:97:10:3a:b6:2f:3e:68:14:70:9a:25:75:3a:fe:20:
17:e7:fd:65:7c:75:49:08:17:99:87:44:fb:dd:9f:43:4d:0b:
01:57:6e:11:71:2e:b9:df:75:fb:c0:ca:ac:4c:1f:c9:41:25:
fe:22:ac:04:71:cb:48:08:73:e0:dc:12:0e:6f:da:f5:bc:b7:
72:8e:70:21:f4:a3:70:1c:95:e3:23:c9:59:af:6b:7b:04:83:
c8:ae:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:32 2025 by rpki-client