Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: BfqYlnsxYuE7seY6S/SShMLEhTMNA3C+6DvakQR2JZc=
Subject key identifier: A0:0C:8D:9B:5F:61:E8:5D:E2:8B:6B:B1:94:1B:33:17:C6:EC:09:5F
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0196A2E5448F1614A8A3BC8D14289C3E3393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 00:00:56 +0000
Manifest this update: Tue 06 May 2025 00:00:56 +0000
Manifest next update: Wed 07 May 2025 00:00:56 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: PmC5au/XLmrlY0HNN8QWsBKw99WKVVAbb7QYSC6e79M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:44:8f:16:14:a8:a3:bc:8d:14:28:9c:3e:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: May 6 00:00:56 2025 GMT
Not After : May 7 00:00:56 2025 GMT
Subject: CN=a00c8d9b5f61e85de28b6bb1941b3317c6ec095f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:70:7d:e1:21:9b:e5:5c:15:6e:60:e1:b1:
0d:98:a2:b3:0a:ba:32:a7:83:34:14:80:54:62:be:
8a:d1:c5:5c:e8:c8:3f:0a:a5:a7:02:fe:4e:62:42:
f9:9c:47:c2:da:5d:f9:1b:be:74:06:61:e6:87:bd:
db:ff:89:55:dd:3a:b8:a5:a8:be:d9:a5:db:63:24:
a4:52:02:5b:9f:59:eb:8c:a6:f5:df:f0:3d:76:7b:
c6:3f:46:f1:44:11:97:b6:1e:3a:08:d0:9b:bb:ce:
63:db:b4:04:66:8a:79:4b:33:1c:a9:25:3b:c8:32:
d6:06:6c:9c:03:13:e9:e6:6c:88:12:0d:c7:59:99:
66:9e:cd:e4:96:ed:88:0e:ad:53:43:8d:0b:49:36:
7a:f3:2e:c5:fb:62:e6:ea:fa:6e:86:51:1a:ec:dc:
06:42:97:3d:37:b8:1c:2a:31:28:14:ab:82:88:80:
d4:7b:95:08:95:09:2b:9c:b2:28:46:15:81:e2:39:
a3:72:65:4f:df:4b:7d:60:30:54:79:cc:ae:e4:e8:
50:50:bb:8f:23:f1:6e:7d:84:91:aa:cd:eb:c9:7f:
e6:39:57:b0:12:35:23:0f:a0:96:1f:d4:c9:e8:00:
57:ca:ed:43:15:14:34:f4:3d:60:77:a8:40:25:75:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:8D:9B:5F:61:E8:5D:E2:8B:6B:B1:94:1B:33:17:C6:EC:09:5F
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:94:27:5a:56:a2:8e:f1:fc:2e:4c:20:c1:24:3c:ea:54:
1b:bc:0b:23:ca:c7:c8:ec:fb:94:bf:ac:30:bd:5d:b7:62:41:
dd:7e:46:18:ef:61:45:ee:09:a5:68:b0:93:25:83:07:d9:ea:
9e:ac:3e:25:cb:17:f9:55:a2:f7:2c:9a:84:fd:7e:d4:ad:13:
49:25:77:10:fd:a4:53:fb:77:c7:0d:89:b0:55:35:22:be:22:
66:74:a8:6a:57:b7:92:b1:a2:94:e2:c4:64:b5:54:cd:21:22:
05:b9:c2:aa:0d:57:4c:3e:db:3b:6e:40:a3:2c:2f:de:22:f5:
d4:ca:5f:06:38:eb:31:6d:0b:32:1b:90:b3:f8:42:a1:14:7a:
b5:28:19:00:7e:46:4a:88:6b:34:56:d3:73:13:21:60:85:35:
68:71:dd:c8:e4:c3:8a:b2:ad:f0:11:82:fe:28:47:11:4f:66:
77:18:2f:ae:93:e8:c4:01:5e:3e:e5:e4:08:b7:d8:42:31:e8:
35:7c:05:0c:69:72:54:eb:86:17:f6:2f:97:d4:da:13:31:7d:
6a:f0:8f:ec:64:d5:63:03:d1:2b:1e:e8:86:23:6c:cb:67:81:
56:56:05:ab:24:30:42:b1:7a:75:db:82:03:df:de:73:f9:e8:
50:a3:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:24:22 2025 by rpki-client