Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: 77YOWB3N+Qcug007EMrysbpMcg+wHvpzPUVcVpWLM5g=
Subject key identifier: 88:7A:25:52:54:A3:33:A2:89:51:BA:06:59:B8:4A:07:CD:79:F6:16
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0196B8C79998466E7C464DDA2C3EDBD17AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 10C4
Signing time: Sat 10 May 2025 06:00:10 +0000
Manifest this update: Sat 10 May 2025 06:00:10 +0000
Manifest next update: Sun 11 May 2025 06:00:10 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: zc+KrdVQSfoY6jhi0gaucO2BlahJzhkvSjJMjJYIEek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:99:98:46:6e:7c:46:4d:da:2c:3e:db:d1:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: May 10 06:00:10 2025 GMT
Not After : May 11 06:00:10 2025 GMT
Subject: CN=887a255254a333a28951ba0659b84a07cd79f616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:59:53:ba:e6:ae:62:a7:92:d1:07:e2:c8:
b7:d7:c8:11:4f:bf:db:fc:fb:aa:8b:60:ad:a9:e0:
55:6b:90:be:f4:d5:69:77:a1:a6:eb:02:a3:e8:bd:
a0:e1:cf:5a:93:74:7a:e0:0b:e3:6a:4b:4d:c4:fd:
c0:60:06:37:aa:c4:9d:49:9e:59:78:c0:89:f0:cc:
70:5b:e3:21:d5:2c:a5:de:9e:5f:ec:ca:5e:a8:44:
73:27:2d:2a:a2:fc:d9:6b:19:91:54:dd:c4:b1:21:
ae:d4:2f:49:ac:aa:fa:19:60:77:eb:eb:7d:15:d6:
61:e0:6e:56:2e:41:5a:3c:22:e0:23:3b:c3:ea:f6:
b1:06:b4:6d:33:ed:8e:04:c9:fb:be:4a:89:11:21:
82:8a:19:d5:7d:ba:7b:a6:8b:a8:a4:10:94:36:36:
d6:6f:53:68:8c:81:f1:24:eb:70:2d:e2:b1:e0:40:
1c:5f:c4:dc:c8:2b:c6:d1:ce:93:80:73:e0:da:0a:
70:82:38:00:d4:4d:a9:d5:72:6e:5b:c6:3b:d2:ea:
29:13:db:a8:84:ae:0c:ff:f7:8b:80:6d:24:ed:a1:
80:00:55:57:d5:6c:86:34:76:b3:19:90:9b:f7:63:
26:91:10:3f:4a:ae:94:84:2e:84:05:40:3b:a1:ee:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:25:52:54:A3:33:A2:89:51:BA:06:59:B8:4A:07:CD:79:F6:16
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8a:a6:f2:08:ae:0d:8b:db:8b:e7:73:0a:10:c6:7b:52:cc:
5f:3e:38:7c:24:b5:a0:b4:b5:34:da:31:69:9d:36:ea:bc:fe:
a1:37:4f:3f:a0:1f:14:66:e2:66:49:81:ee:de:8b:1c:60:a8:
1c:3c:19:b1:c5:93:e8:6c:c4:34:19:d7:9d:59:46:25:2a:95:
18:7b:c3:d9:71:81:1b:a8:a6:68:fe:47:3d:0a:82:3a:60:89:
4e:18:48:ef:21:e0:2d:0b:bd:91:39:65:9d:0e:1e:76:f8:8d:
0b:93:1e:a5:3b:30:f3:35:bc:63:31:3b:19:7b:87:95:aa:46:
44:89:82:e9:94:1b:a9:7e:51:f7:e9:a4:80:36:f9:aa:0b:96:
f4:99:da:72:8d:bf:62:d9:6d:01:6f:93:f8:92:e4:76:24:e8:
72:b7:26:62:b0:49:ff:83:70:70:b5:d3:4b:c9:12:9a:56:11:
22:47:14:ab:3d:1e:da:5c:42:13:8a:8c:18:6e:49:c9:ad:3d:
8e:e4:87:91:96:92:75:44:5c:90:c9:0a:82:fc:4b:9d:2e:1a:
f0:44:13:7a:e8:c9:18:46:de:9d:3d:8b:89:6e:b9:78:b6:14:
42:d2:5a:6e:72:b1:2a:76:6b:e5:e8:31:2a:29:5d:9e:2c:1a:
77:a4:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:55 2025 by rpki-client