Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: GFHSTcdsYcPGKXPC9DF8O6J37jZiligWSsY+ySTJHC8=
Subject key identifier: 56:2C:0B:5E:48:1D:BE:28:63:BA:7E:52:A7:26:13:40:55:5F:33:2E
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 0196CA976A53E0AC683C6C618ECDA9B8F1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 17:00:42 +0000
Manifest this update: Tue 13 May 2025 17:00:42 +0000
Manifest next update: Wed 14 May 2025 17:00:42 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: A5ObWOtZXhtKOsXAZCEWyltRo+sL/bka+D3zGAjzcWI=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:6a:53:e0:ac:68:3c:6c:61:8e:cd:a9:b8:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: May 13 17:00:42 2025 GMT
Not After : May 14 17:00:42 2025 GMT
Subject: CN=562c0b5e481dbe2863ba7e52a7261340555f332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:30:96:2e:78:8a:02:65:51:45:50:2b:f2:
83:7e:cd:e0:39:72:58:e5:86:ee:8a:f5:9b:61:f3:
4f:54:bf:7b:44:ed:2e:da:86:75:59:82:a9:93:4a:
ea:66:df:46:43:e8:18:eb:5a:38:ab:b1:12:e2:9d:
33:81:62:05:63:dd:ae:0e:d5:a5:d1:ef:5b:fb:59:
e6:2d:dc:65:fa:8c:b0:c3:2d:0a:29:89:3e:f7:d9:
49:4c:a5:4f:65:3b:ea:c7:84:d0:98:f5:48:0c:69:
bc:57:e2:63:b2:f8:2a:a3:b6:9f:6a:a7:03:35:95:
ad:72:7b:f1:e1:b1:f0:ce:a1:4c:e9:67:09:4a:9f:
ee:6b:82:19:72:6d:9f:f0:ae:6b:b6:52:1d:e0:29:
55:b2:53:19:81:b6:c2:4a:5d:e4:6e:b6:51:8d:37:
20:d1:2f:20:11:22:32:c8:50:98:b9:0f:3f:5d:69:
0b:2d:8a:d9:aa:59:4a:5e:04:d5:e6:21:95:d8:7d:
00:8a:89:5d:69:09:1d:05:e1:3c:72:09:c0:32:f1:
f9:3d:63:8d:93:b4:d0:7e:03:ae:2a:ba:6a:76:69:
97:1f:41:4b:57:27:61:97:51:c4:48:81:19:b2:99:
67:45:85:3d:35:db:8d:57:64:86:24:ba:01:18:ac:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:0B:5E:48:1D:BE:28:63:BA:7E:52:A7:26:13:40:55:5F:33:2E
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e2:99:4e:d5:0f:96:cb:e1:6b:36:12:ec:58:f5:95:ef:f1:
a1:27:7e:f9:70:60:44:58:ad:43:02:ff:c4:55:3b:d3:2f:c4:
ef:8e:66:e1:7c:33:7a:43:32:57:06:d5:be:de:9a:3d:0a:01:
89:ac:5b:11:ba:e6:5b:96:66:b9:c1:1b:b0:a8:45:60:0a:76:
5c:4c:59:ef:5b:53:3c:cc:2f:a0:d6:3f:f1:85:2e:53:4f:c0:
60:71:35:ab:5a:0d:12:ed:2b:63:e3:c1:b6:ab:d8:69:a2:6d:
db:75:f9:6b:33:fc:2a:58:fc:c1:19:f3:e5:1d:64:50:4d:54:
2d:6f:f6:d5:86:e8:8e:10:92:3d:fd:b7:d2:e6:33:29:ae:1c:
e9:ec:c8:f8:a5:29:4f:68:fb:60:b6:85:0a:41:17:58:63:b6:
0d:f6:b1:0f:a3:d5:20:ea:bc:42:1f:69:b0:eb:bf:63:f1:af:
56:4e:6f:13:b1:f0:67:70:dd:29:15:ed:99:35:3d:c6:b9:1d:
7d:fe:5d:4e:98:bc:1d:6b:d3:d0:99:8f:e8:b9:40:ad:3b:13:
c3:7c:54:72:aa:d5:52:e5:db:06:c4:2a:2f:d9:b7:51:bb:58:
f1:38:bb:a7:2e:68:78:22:4a:a3:1e:70:2a:47:04:e0:fd:77:
dc:63:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:09:07 2025 by rpki-client