Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: hCpi1IJumLIbGeLB1gZzgc7pnwOWw3Mi0ShLvkr32kQ=
Subject key identifier: 47:27:03:4C:83:09:92:9F:73:6B:90:47:F8:2E:8D:77:1D:79:7B:12
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 01969E9AF639BC831550296125E53C71565D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 04:01:17 +0000
Manifest this update: Mon 05 May 2025 04:01:17 +0000
Manifest next update: Tue 06 May 2025 04:01:17 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: KCpfzKVMM/VQ+7P6Sakjg6kp88dAs4CteHfn7F65N6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:f6:39:bc:83:15:50:29:61:25:e5:3c:71:56:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: May 5 04:01:17 2025 GMT
Not After : May 6 04:01:17 2025 GMT
Subject: CN=4727034c8309929f736b9047f82e8d771d797b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:d8:4e:de:15:72:71:02:6e:a2:1c:6b:00:
d5:6a:cf:6c:d3:c5:89:9d:91:72:02:00:c9:b0:e6:
ca:40:9a:42:4e:16:a2:77:c5:7e:95:b7:6b:a1:6d:
02:ad:e8:ed:8d:7a:f6:94:56:0c:cc:e8:17:b5:4b:
bf:ce:07:b1:70:9e:90:6b:0c:3b:d9:83:5b:df:39:
67:3c:28:ab:4c:bd:ef:a0:1f:13:c8:c9:7b:33:02:
c9:ca:e3:db:30:a1:8c:6d:ad:bf:35:72:cc:14:d4:
2a:1b:7a:49:55:0b:89:33:48:f5:70:46:65:8f:15:
b0:9f:58:ea:7b:80:df:da:8f:08:3b:20:33:0e:84:
03:04:a9:2b:c0:52:40:73:20:4b:65:96:ff:ec:7f:
ec:f8:56:ed:b3:2f:71:10:7d:b9:67:03:71:8b:d5:
df:6a:94:b9:9c:33:f5:b4:19:f7:7c:8a:cd:07:e8:
35:8f:4c:84:31:f3:14:65:2c:e7:1d:94:73:1f:21:
d1:19:42:20:de:de:1b:ff:46:d1:26:cf:a6:c3:0d:
27:b8:89:fc:55:58:4e:76:0c:5c:09:fe:d0:79:f4:
20:b9:05:49:cf:0e:1a:73:c6:8c:0f:a9:1e:ea:05:
6e:8a:6e:80:1d:4d:aa:e8:84:44:86:5c:3c:d4:54:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:03:4C:83:09:92:9F:73:6B:90:47:F8:2E:8D:77:1D:79:7B:12
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0f:0c:cd:be:4d:51:1c:7e:ae:b6:f0:8f:a2:18:ba:f1:b6:
a9:73:4b:a1:11:3a:11:4a:ed:52:97:9a:4c:df:e9:3d:04:fa:
f0:01:35:88:0e:4b:91:1d:65:1d:b3:f3:19:ec:29:83:55:3e:
66:f3:d1:07:90:e5:df:12:c2:0b:7e:03:ea:2c:85:95:f9:10:
53:5a:e3:97:79:e6:59:23:5a:93:a6:e7:69:d7:14:af:e7:a4:
7a:53:d2:0d:05:e3:80:b2:fb:f0:fc:42:ec:cb:98:a0:83:4f:
ca:9c:17:07:ab:4a:5d:68:66:d0:bf:2b:ad:27:05:f6:6d:e8:
0e:08:1c:64:3c:bd:56:cb:e4:6f:aa:c7:f6:5d:33:74:02:b0:
a0:35:d5:83:c6:0d:ac:95:02:42:f8:27:7d:92:23:ad:1c:53:
da:42:57:ab:d0:6e:be:18:e7:6c:e3:ae:8e:e8:21:d7:b4:47:
2f:41:6a:cf:50:8f:2f:d6:f6:2f:65:02:9c:fe:d5:56:34:12:
55:8f:38:36:6c:0d:c3:0b:7b:82:28:a7:34:aa:e1:60:e7:d5:
61:20:a1:34:40:ac:b8:1d:07:f6:6d:2b:8c:ff:98:8d:1f:0c:
27:16:7e:43:fd:4c:c4:07:bb:80:b9:40:98:ba:02:58:96:fb:
df:e3:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:31:05 2025 by rpki-client