Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: 1Tp+gD6cyAX/NZssVFhZXPKPNrciKl77m7+eMDjLkRc=
Subject key identifier: AE:8C:98:09:08:54:8D:CE:54:5D:B3:EE:EA:C9:BA:F2:02:28:ED:0C
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0196B9DA54D5AE911B2106AC6737B84ADD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0A78
Signing time: Sat 10 May 2025 11:00:15 +0000
Manifest this update: Sat 10 May 2025 11:00:15 +0000
Manifest next update: Sun 11 May 2025 11:00:15 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: 2fEBVS4bKFhVJuDYOSyGvdJ7//Zy2SvkZf1eWg2U3Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:54:d5:ae:91:1b:21:06:ac:67:37:b8:4a:dd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: May 10 11:00:15 2025 GMT
Not After : May 11 11:00:15 2025 GMT
Subject: CN=ae8c980908548dce545db3eeeac9baf20228ed0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:d7:c2:96:78:00:ac:d7:cd:83:7f:d3:17:
9f:c8:32:4a:27:e8:6d:1e:23:bc:04:81:c3:68:c4:
28:04:e4:c1:a6:47:40:66:49:a7:75:b3:86:7e:1a:
41:f4:95:8b:fb:1f:72:3a:8e:b7:ab:4a:3d:1e:f1:
d7:35:3b:cf:9a:92:dc:b5:69:49:ee:a1:01:03:95:
b8:89:74:ed:cb:a2:d8:d6:2d:e2:0f:68:2a:c3:95:
ba:b2:13:5e:2c:9d:af:67:20:cd:bc:61:a3:51:5f:
78:cb:1b:7b:c3:87:82:72:99:65:85:1c:25:ea:d0:
dc:fd:1f:57:db:7b:25:3a:ff:b8:f3:01:4c:89:03:
ce:fe:85:a7:47:70:5a:72:5a:82:56:fd:ae:15:a3:
0e:d0:60:a6:41:83:09:78:63:8d:3f:47:d8:5b:8e:
94:c1:d1:33:a2:d0:98:af:7f:24:29:a6:f6:7e:99:
39:b1:40:eb:a3:57:e5:0d:db:6c:6b:14:92:35:2e:
a0:9d:8c:30:38:33:e9:bf:d8:8b:8d:16:78:44:52:
f1:63:59:49:59:31:b0:a2:2e:dc:1a:f0:d2:e4:e8:
87:3a:25:c9:40:5b:a9:70:e4:f0:a9:23:a1:ab:ce:
75:82:d7:e2:8a:40:49:4f:a2:fb:b1:9f:f3:ca:6c:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8C:98:09:08:54:8D:CE:54:5D:B3:EE:EA:C9:BA:F2:02:28:ED:0C
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:34:4b:6e:11:48:c1:e1:30:54:67:4a:ea:72:b7:c8:03:
97:e9:94:ee:06:72:da:8a:b0:f3:a6:70:23:a4:90:1f:1c:31:
84:24:30:1b:ba:3b:ae:ff:6b:76:b7:80:20:2b:8d:8c:02:dc:
41:df:e7:fd:e1:eb:5c:42:c2:3e:98:9d:6c:5f:10:00:2d:e8:
ed:9a:89:ee:ff:b5:93:27:7c:ea:2d:01:3f:94:cd:96:ac:b7:
2a:d8:28:5b:1a:2f:ca:af:c7:94:87:0f:a3:cb:0c:70:9d:a3:
1d:d6:f0:9d:2b:31:a7:4f:2f:ef:de:2c:9e:ce:e0:99:83:29:
77:aa:60:b2:f0:75:fa:78:21:f5:08:95:e9:d1:ca:5a:98:bf:
d8:be:ea:30:e7:e6:54:27:31:f0:7b:8d:a4:98:5a:c7:34:6d:
31:ba:01:81:53:4f:a4:82:42:b5:3e:d9:49:47:6a:63:18:d6:
aa:43:10:00:6b:54:2d:b0:47:92:3b:35:e5:dc:20:e2:83:8d:
eb:25:17:79:c5:32:32:56:cb:f3:84:90:81:3b:65:9b:42:dd:
56:6c:73:ef:24:21:a6:ef:41:57:9f:32:a9:00:82:61:58:f4:
d2:8e:cf:a1:04:63:51:08:45:f8:bf:91:4a:91:bb:95:1a:e3:
99:1c:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:57:43 2025 by rpki-client