Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: p+iuMFzdzgq+ws0f5kP/g2JRJxd7awYnnhfO0bmPxBc=
Subject key identifier: E4:C3:89:5C:34:12:23:72:29:A4:0C:05:77:C6:39:BE:7F:70:06:35
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 0196BD810DAC4DD03066B765358AC392EBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 04:01:13 +0000
Manifest this update: Sun 11 May 2025 04:01:13 +0000
Manifest next update: Mon 12 May 2025 04:01:13 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: yiaAE6cOrevjceBF22IcZ9regt9vE24T/xPBv2cp6pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:0d:ac:4d:d0:30:66:b7:65:35:8a:c3:92:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: May 11 04:01:13 2025 GMT
Not After : May 12 04:01:13 2025 GMT
Subject: CN=e4c3895c3412237229a40c0577c639be7f700635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:da:41:e9:74:74:a8:58:38:5f:9e:46:98:
dd:a3:a5:21:06:ad:b4:9a:1f:39:f5:c5:c8:a9:f9:
89:a6:79:b3:90:5f:32:9f:63:b2:96:dd:20:87:e6:
5e:c3:87:91:a8:5b:c0:d6:be:b6:66:21:9e:b3:95:
6c:a7:47:d0:1c:55:64:15:53:32:90:85:3d:60:ee:
b2:b3:60:ec:b6:86:9b:47:fe:bd:95:1c:6f:2c:bd:
cb:0d:27:e0:4c:a1:29:db:05:9c:00:e1:ec:ed:5d:
08:de:cb:05:de:c9:e6:8b:6d:e1:6a:a9:2c:5f:df:
b6:61:f1:71:db:b7:2f:17:cd:3c:40:03:50:57:6c:
2b:2a:6f:d7:13:b8:8e:8b:3c:04:0f:69:8e:6a:e3:
07:0f:01:7b:a4:c4:3b:9f:64:30:cf:d3:d4:71:95:
44:35:0c:f6:d7:d0:bc:4c:08:8e:83:e5:76:e9:4b:
ca:63:a7:f6:fa:46:bf:ef:78:73:30:3f:d8:0d:97:
47:e0:0d:ad:af:43:80:95:12:b7:ed:c2:dd:56:c4:
87:af:aa:15:1c:ba:69:61:0c:aa:91:c1:a6:ba:1e:
51:f6:3e:21:b2:c9:4b:32:91:c4:91:02:31:15:39:
ca:35:87:fd:a4:87:2b:9a:e4:a2:08:b6:58:80:43:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:89:5C:34:12:23:72:29:A4:0C:05:77:C6:39:BE:7F:70:06:35
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:01:09:fd:b1:8d:70:29:cd:64:a6:04:51:c5:e7:c9:e6:
fd:23:83:be:53:f6:45:5c:3d:22:0e:25:41:bc:48:1a:de:01:
75:db:98:55:e6:1f:98:b9:fb:ee:3e:90:30:fb:9c:d3:c7:ff:
18:70:42:09:38:e8:63:a7:8c:ab:aa:ac:76:4c:17:76:06:06:
20:b5:fc:96:ef:aa:c7:47:4f:77:1f:a4:05:f3:29:dc:c4:92:
44:a6:2a:88:ce:be:f5:fe:91:02:49:c8:e6:a2:cf:3b:16:a2:
3c:46:d0:06:67:b4:fa:2b:ac:b0:f9:6d:2d:6a:e3:8a:4f:d3:
42:ca:49:63:e8:6d:3a:70:d5:b1:85:87:02:46:db:f4:05:6f:
77:f5:5c:7c:22:36:1b:63:a0:e1:c2:56:2f:6b:bf:cc:06:4b:
32:a0:27:bd:68:25:f4:37:d7:24:74:df:74:c2:4f:db:3d:5b:
a2:02:8c:4b:6e:9b:42:24:18:a4:41:93:65:b8:06:ff:44:3b:
2a:6e:05:52:98:7f:1e:27:70:30:69:38:2c:6f:08:17:02:36:
70:16:bd:1c:b2:fa:17:b9:bf:e6:4b:a6:5f:a3:33:92:c1:93:
00:33:a3:92:48:2d:c1:d1:2a:94:76:56:8c:66:4e:74:50:95:
9a:cb:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:53:28 2025 by rpki-client