Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: mOHvysJdOiWzmyOAB+KJA/3EnZ/NLTItHzjZzvGOCU0=
Subject key identifier: 0B:BE:96:74:7E:78:2F:3F:86:F4:55:FB:E5:68:18:F6:8B:03:89:3C
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01969F3F0B2750DC4E1DFD3F9389A91FEB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1552
Signing time: Mon 05 May 2025 07:00:31 +0000
Manifest this update: Mon 05 May 2025 07:00:31 +0000
Manifest next update: Tue 06 May 2025 07:00:31 +0000
Files and hashes: 1: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
2: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
3: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
4: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
5: ZIR_yTw54Vg-opPAQLBsjCA0kZk.roa (hash: IWAm2sXCY8KxHtRY4zBKo5b13l+g7LnQAwj1OVOtgXw=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: ZHe19ti93M+5A93HuktWMZ380CD8xMvwEaOCJpE4z6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:0b:27:50:dc:4e:1d:fd:3f:93:89:a9:1f:eb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: May 5 07:00:31 2025 GMT
Not After : May 6 07:00:31 2025 GMT
Subject: CN=0bbe96747e782f3f86f455fbe56818f68b03893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:ff:33:49:f0:34:db:75:6c:39:f8:5f:55:
cc:16:6a:28:5f:99:df:ce:6e:9a:b8:1e:cb:f7:c4:
9f:f7:d6:06:22:12:25:07:45:81:77:71:fd:f9:07:
16:30:2a:15:17:5b:4b:85:ae:ef:49:2f:88:cb:67:
6c:58:68:76:d1:34:72:58:70:53:4a:da:28:f8:6d:
3d:d7:3c:33:a1:45:7b:e9:a4:9d:f6:5d:18:e0:f9:
48:53:29:69:3e:40:2e:74:43:6c:e7:7a:e4:17:9a:
5b:7e:c0:c6:bd:f0:87:25:81:50:c4:56:5d:ee:72:
b8:0a:67:38:65:c3:e1:86:c5:f6:4e:fe:f9:5e:f0:
e3:ab:a7:ed:b7:2d:14:36:53:9a:36:38:da:22:18:
7d:6c:9e:fa:cc:71:41:77:77:1f:0f:ac:2a:99:4c:
4b:73:42:c8:ed:5d:14:d2:b8:40:5a:a0:d1:41:48:
63:15:ce:85:0b:de:f8:f2:1c:c8:44:f6:1c:bc:61:
fc:05:74:ab:3b:ae:d7:68:1b:b3:5c:23:96:ad:d6:
a7:dc:2f:fd:81:5e:bb:cd:c1:b8:92:60:7b:91:9f:
1a:ad:02:31:cf:1b:df:90:12:be:1c:d3:e1:1f:18:
ce:fe:3c:5d:42:a1:f4:bd:c8:1d:30:2c:03:c1:4b:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:96:74:7E:78:2F:3F:86:F4:55:FB:E5:68:18:F6:8B:03:89:3C
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:bb:89:e1:76:87:78:da:36:81:d0:37:46:b9:fe:71:25:
32:97:a2:35:45:34:2c:e4:2f:77:91:c3:ce:5b:f1:7b:d1:11:
f0:2c:8d:a5:8d:fe:ac:50:0c:a7:32:86:f1:9d:4e:36:b8:ac:
8a:75:a0:0a:4c:3b:ed:17:f6:a9:7d:fe:d5:f2:07:f3:d6:9e:
27:cd:49:20:05:c1:db:8a:41:fb:31:db:89:4d:ae:99:ce:a4:
15:3e:66:aa:ae:61:79:83:e8:74:c5:1b:b3:d5:d9:1b:98:f8:
8a:88:3a:e5:7a:d6:38:ac:c6:02:8f:74:7e:91:55:b0:ae:9b:
66:80:b8:91:68:f5:dc:98:49:5e:a0:93:1e:81:85:e8:34:ec:
25:3a:e1:84:72:31:df:47:74:61:a7:d1:f1:34:1f:8c:d2:3f:
bf:ce:32:93:22:2d:96:07:ff:d5:05:ac:3e:12:cc:df:63:00:
0a:3b:f2:05:14:9f:35:da:ab:e2:7f:7a:04:25:b9:22:c3:14:
da:0c:17:74:44:1e:0a:b5:00:ec:6b:24:9b:26:7f:56:3d:1a:
97:a0:93:47:5a:37:01:87:a4:5f:22:4c:98:14:96:5b:15:55:
15:62:08:5c:7f:93:cd:0a:48:28:f5:2b:67:e2:82:30:14:0f:
0e:73:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:44:15 2025 by rpki-client