Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: TaQcbOmuoQKFDZrx9GFZHvnomcf1mwXsW7CR2FclSnI=
Subject key identifier: 0B:48:8F:4E:F1:78:C8:75:EF:5E:05:95:6D:8B:12:A2:1C:82:34:B9
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 0196BFA56EB2F81FB7D500F65798BE27E848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 036B
Signing time: Sun 11 May 2025 14:00:12 +0000
Manifest this update: Sun 11 May 2025 14:00:12 +0000
Manifest next update: Mon 12 May 2025 14:00:12 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: 696EKBX6d1E+Wwhh1YqXUhFqTl2+N9/Z+j2AuhJIbR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:6e:b2:f8:1f:b7:d5:00:f6:57:98:be:27:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: May 11 14:00:12 2025 GMT
Not After : May 12 14:00:12 2025 GMT
Subject: CN=0b488f4ef178c875ef5e05956d8b12a21c8234b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:17:51:49:ff:99:5e:62:62:b2:b2:da:ef:
4b:78:ef:91:b3:fb:ac:41:44:76:d1:98:fd:99:89:
cf:4f:de:22:c0:ae:da:b6:15:02:a8:f4:fc:97:87:
d3:a6:46:e2:60:c3:dd:cc:5a:96:65:22:22:b5:a1:
c6:3b:8a:5c:b4:29:9a:8d:f0:7a:a6:7e:b9:9e:8f:
80:67:18:62:02:aa:12:7b:57:ea:e3:04:14:3a:16:
e6:2a:22:ea:cc:ec:e2:0e:fd:61:c1:31:a1:86:aa:
a7:df:75:96:6f:4d:26:ea:28:9e:8d:f8:30:b5:74:
71:64:f4:cc:0b:87:33:b1:d4:77:e2:9e:e8:92:fa:
05:88:f1:50:36:d4:a5:6d:bd:88:79:ca:47:dd:78:
2b:98:30:f7:cd:64:01:5e:05:bb:13:d8:39:19:fb:
c6:77:e1:89:2d:36:5b:e7:72:63:8e:46:ba:f6:46:
06:76:08:2e:9d:90:b7:cd:8b:a1:7a:21:9b:41:cc:
33:1e:1c:a2:e0:b4:54:59:4f:7a:24:67:b8:35:35:
6f:ed:59:2b:04:ef:f2:d8:9f:13:54:e7:9f:5f:e5:
12:82:4c:16:43:ea:d6:de:ba:25:2e:6a:05:db:09:
0e:f9:8d:73:f6:7b:d8:1f:95:f8:ff:09:fd:5c:75:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:8F:4E:F1:78:C8:75:EF:5E:05:95:6D:8B:12:A2:1C:82:34:B9
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:e8:8d:ee:e2:09:ec:e4:27:94:84:c2:e4:69:7d:ec:24:
fa:37:31:36:cb:22:46:2a:66:85:00:a6:9b:7b:23:f6:22:62:
9d:68:86:cd:86:5b:8b:1f:5d:b7:b4:82:49:50:11:f7:c2:1e:
af:7c:fd:62:9c:00:f7:50:e4:16:05:3d:10:a9:c6:ee:fc:8d:
e4:ef:24:94:be:c2:7b:18:60:ae:11:8f:4c:ae:2d:7c:5d:0d:
31:89:84:a6:e2:15:66:bd:0d:00:2e:7f:ba:1d:73:0a:14:f2:
65:1e:24:52:c9:53:3a:cf:db:d5:ad:c5:b9:df:5e:bd:eb:33:
e4:0e:81:6c:73:a1:f4:42:10:ec:69:c6:6c:1e:a3:59:48:02:
b7:5d:26:0e:84:62:e0:2b:e6:80:71:10:3a:57:79:c0:5c:16:
51:3e:2d:80:ee:55:b5:a0:d2:0e:21:c2:29:cf:77:23:50:59:
0e:2a:9a:68:4f:0c:e7:5a:61:f8:ec:2c:5c:57:04:1a:05:c3:
82:f4:95:62:f2:06:e9:c0:8f:ca:80:ea:44:f5:1a:e4:51:c4:
af:ae:96:52:b6:db:83:95:47:60:4f:8d:82:4e:f2:43:7e:4f:
83:d1:f3:24:b6:0f:33:f3:00:5b:93:7e:e3:41:27:af:4e:13:
fc:c0:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:00 2025 by rpki-client