Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: 6on9fMNcdDhgSZmE02lK15SKvAgmaDt7NTvDZ7nzeQ0=
Subject key identifier: F0:B8:5D:C2:2A:F4:05:03:E7:E2:BE:AC:A5:EE:29:D2:48:F8:A6:40
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 0196A051C8ECC73D2BC5D3F99769ED3ECBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 12:00:36 +0000
Manifest this update: Mon 05 May 2025 12:00:36 +0000
Manifest next update: Tue 06 May 2025 12:00:36 +0000
Files and hashes: 1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: X82A6P9uAw420hs2wAz+JG94DglGJevn1UdyfICELjA=)
3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:c8:ec:c7:3d:2b:c5:d3:f9:97:69:ed:3e:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: May 5 12:00:36 2025 GMT
Not After : May 6 12:00:36 2025 GMT
Subject: CN=f0b85dc22af40503e7e2beaca5ee29d248f8a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:61:d5:20:57:5b:ec:83:b9:10:5f:df:7b:
ea:b4:fb:76:25:72:e8:ab:93:49:fd:14:4d:da:86:
25:9e:25:d1:ba:72:8e:a6:ac:8d:a3:6e:0f:3c:fa:
73:cc:32:e9:48:60:86:63:d3:a4:72:47:a0:eb:09:
34:fd:40:51:c5:bb:ea:7f:f8:6a:e0:22:eb:d7:21:
82:50:11:93:2c:74:a0:aa:b9:50:46:42:29:15:43:
38:36:a2:67:5e:b6:2a:31:c2:c5:c4:0c:33:76:8a:
60:62:d8:a2:15:a9:67:b1:6e:01:bf:be:3f:15:6e:
0c:f9:3f:1f:5d:75:39:aa:4c:b8:da:f5:25:da:c5:
6c:1e:e9:f5:32:f2:a1:78:4f:b4:4d:a6:89:13:fa:
51:1b:44:20:c7:dd:0e:79:a8:45:cc:47:52:aa:2a:
e7:46:b6:54:93:7a:ce:a5:0d:f5:15:56:3b:a3:e7:
9e:ce:d2:89:87:4a:23:5e:62:cd:71:74:bb:07:cc:
82:9c:ae:72:fd:4f:35:bc:4c:b3:b5:5d:7b:fa:3c:
f4:75:e7:fa:85:39:c9:cc:ac:94:a5:24:25:7f:02:
e9:e1:7b:1f:32:53:3d:65:96:d6:c2:3f:4c:10:1e:
9b:5e:67:2a:ae:73:70:39:94:a4:6a:cd:75:1d:4d:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:5D:C2:2A:F4:05:03:E7:E2:BE:AC:A5:EE:29:D2:48:F8:A6:40
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dd:03:63:17:91:5b:e1:7a:dd:de:da:0a:92:30:04:51:da:
a9:c0:89:22:3c:3c:50:f0:c7:47:f7:63:c4:35:e1:e9:df:5f:
49:a6:50:eb:7c:29:7b:a2:ea:7e:5c:df:34:07:35:11:85:28:
71:1c:1f:bb:d0:f7:a5:d5:6f:02:3e:29:be:d7:a9:8e:78:4a:
bb:1c:99:b3:3a:38:56:8b:38:17:83:7a:71:6f:ff:54:f2:6b:
43:e9:36:a9:10:43:41:2f:1f:9d:67:94:51:d9:f6:27:6b:d3:
67:02:82:08:ce:ae:b2:cf:c5:21:74:0e:cd:3d:ab:b3:15:bb:
a2:2f:b3:94:02:76:44:44:10:04:21:3e:31:08:bd:a2:21:74:
64:42:82:6a:3d:d1:4a:9c:2b:9d:51:ea:0e:3f:9b:80:78:0b:
5f:d1:4c:3f:3e:72:da:66:32:90:2b:c3:59:3c:d5:75:94:26:
8c:91:4f:9a:c9:ca:e0:68:bd:54:9d:f1:a8:76:c1:4b:20:f8:
c9:4a:bd:ef:33:80:9d:0e:c9:6c:12:f3:c7:8d:87:3f:5a:ad:
07:4b:4d:f4:75:1b:9e:db:5e:0d:f1:e2:70:b9:aa:2d:6c:7d:
88:ee:9a:fc:fe:fd:34:5c:34:60:5c:a2:00:c6:d0:4b:5e:78:
e7:2d:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:07:23 2025 by rpki-client