Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: JBDUQTHqM2A5BkiEKkQfa4sNmZ6dBzXtlY8Woep/TGg=
Subject key identifier: 15:6A:16:D4:CE:9C:A3:21:54:48:B5:A8:BE:A5:2B:F1:FD:EA:08:C5
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 0196BFDCBA609AE4E580461443062CDC009D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1079
Signing time: Sun 11 May 2025 15:00:35 +0000
Manifest this update: Sun 11 May 2025 15:00:35 +0000
Manifest next update: Mon 12 May 2025 15:00:35 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: sHPWKyJRbdFj4a4QXHo9hvZYW0oz/EUkXdlE0WqiOeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:ba:60:9a:e4:e5:80:46:14:43:06:2c:dc:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: May 11 15:00:35 2025 GMT
Not After : May 12 15:00:35 2025 GMT
Subject: CN=156a16d4ce9ca3215448b5a8bea52bf1fdea08c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:29:71:18:fc:ad:2b:b9:6c:70:64:8e:5e:
a8:4c:d3:41:aa:33:79:22:81:6e:8c:10:3e:86:25:
77:8e:36:3b:10:5a:f5:ba:13:83:e4:c5:ab:0c:be:
bc:06:80:8f:3b:24:00:dc:5a:77:21:90:fd:22:e8:
ed:2c:f7:c8:b6:b9:da:c5:2f:a6:e9:ea:93:66:fc:
67:0b:bc:b5:a0:cb:46:2e:a8:16:10:5e:f9:81:da:
14:21:47:b9:af:dd:d0:fc:9c:60:ba:dc:94:e2:34:
2b:2b:86:32:34:83:ec:23:5a:c1:44:ef:40:fc:81:
d0:ac:74:34:fd:e4:1c:03:c5:42:9c:b4:dc:a4:e5:
6e:6f:de:48:c2:de:63:9a:04:95:08:44:47:46:c3:
38:1d:e0:61:d3:92:32:a8:89:70:15:52:17:de:d3:
45:5e:91:eb:b1:02:f6:1e:f3:ce:9c:8e:32:12:c8:
24:1b:b5:1b:1b:33:49:12:40:f3:98:a8:84:44:c1:
a0:6e:44:c7:a7:65:a3:0c:a6:63:01:84:24:e4:56:
4f:3a:1a:5e:bd:2d:11:b1:91:b5:32:9a:79:b4:e1:
8f:dd:ca:67:df:53:76:ea:43:b7:ef:dc:a2:f3:d7:
77:26:64:ba:ae:5b:0d:fb:66:5c:dd:c3:2a:03:4c:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:16:D4:CE:9C:A3:21:54:48:B5:A8:BE:A5:2B:F1:FD:EA:08:C5
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:d7:e5:ed:8a:9f:5f:e3:0a:99:8b:1e:ed:0c:06:f5:af:
87:3b:0f:00:80:2a:df:a8:c0:d6:de:27:a2:4c:31:03:f1:57:
16:37:39:c9:f9:2d:df:68:c2:79:56:76:6e:2d:d9:dc:8e:9d:
d5:c8:e9:01:f4:45:d3:17:c0:1c:8d:5b:98:3d:b4:59:fc:c7:
04:e1:37:bd:50:4a:13:16:95:49:47:e9:5e:aa:ce:b1:0c:34:
46:cd:eb:44:f7:28:bf:f9:51:bc:62:50:b0:45:e6:3c:22:dd:
70:82:39:f5:25:f4:29:9c:01:a2:bb:56:20:93:12:e9:87:63:
09:67:4f:58:d9:5b:c9:ec:02:23:3b:a9:65:54:60:a2:cc:7d:
b9:b5:bb:fc:dc:54:d3:c0:85:3f:37:41:26:1b:22:c6:fc:6d:
be:6f:75:32:4c:c8:ee:ee:b9:2e:f5:76:b7:b3:a6:7a:fe:2b:
50:91:5a:f4:bb:d0:59:ae:9c:6c:64:61:cb:89:fb:49:33:ee:
e9:77:e3:ba:a2:39:41:bc:e0:bc:13:b4:60:67:1f:7a:ab:5e:
6d:41:1b:dd:9d:4a:12:55:cf:17:96:6c:3a:bf:13:9e:c2:f7:
b6:01:ee:79:f5:d6:58:e4:06:2a:46:f5:8c:65:e6:47:97:84:
83:21:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:09:03 2025 by rpki-client