Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: RqDzk4neHR//kwXm/lrAgFjxvOOrc0r1xD135XGlQqU=
Subject key identifier: 78:B3:9D:71:E4:1D:8D:CE:EA:73:90:9D:2A:97:1A:CD:A1:AF:DA:BD
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0196A879106338E910FDA3392FB3D49B2339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 011D
Signing time: Wed 07 May 2025 02:00:28 +0000
Manifest this update: Wed 07 May 2025 02:00:28 +0000
Manifest next update: Thu 08 May 2025 02:00:28 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: l+kcnxNiUvm06/WcCJmum0QoNCZJkLnZg+AIuaoESQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:79:10:63:38:e9:10:fd:a3:39:2f:b3:d4:9b:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: May 7 02:00:28 2025 GMT
Not After : May 8 02:00:28 2025 GMT
Subject: CN=78b39d71e41d8dceea73909d2a971acda1afdabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:af:4f:22:14:bb:5b:c2:c2:83:21:c2:2e:
4b:a6:0d:b0:d9:d3:a8:84:ca:6b:e4:86:8d:95:14:
d9:df:26:56:a4:ee:07:c3:96:bf:72:43:50:c1:bc:
4b:bf:0a:91:4a:aa:40:79:77:01:39:b7:9c:12:25:
23:b8:ad:fa:2e:04:de:9d:fa:86:d9:07:04:22:15:
c7:3e:7d:52:a6:5c:59:3e:60:89:36:98:66:36:12:
56:cf:d0:f1:60:ff:8b:12:36:9a:29:16:c7:8d:40:
53:a0:90:a8:1f:fb:3e:0f:ae:7f:e2:65:0e:27:86:
d3:ca:20:67:03:97:e6:04:ab:ac:15:74:83:c8:5d:
ef:63:6a:74:ca:f7:6c:55:0b:b0:24:d9:af:65:3a:
9d:99:8d:b1:44:2f:da:11:f2:79:60:72:be:d0:59:
34:10:1a:63:a6:09:11:93:fc:4c:98:78:41:ef:c3:
42:5c:e5:56:28:86:0b:d1:21:fb:16:11:0d:44:22:
e5:4e:93:e1:4d:ca:1e:0f:08:b5:1c:00:56:73:2e:
8f:3e:69:b9:8b:fa:6d:0a:e8:35:b8:f7:0b:d3:d2:
fb:09:f9:d4:ab:27:7b:e9:f1:91:cd:c0:51:30:d8:
b9:07:a8:65:c9:d0:97:ab:54:48:be:e6:b3:e1:d5:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:9D:71:E4:1D:8D:CE:EA:73:90:9D:2A:97:1A:CD:A1:AF:DA:BD
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:89:09:a7:d0:9a:5c:74:a9:b7:f2:92:b6:b8:b5:cb:31:
14:ce:71:84:23:19:5c:6b:96:00:04:26:fb:3c:97:47:07:3a:
82:75:94:cb:e8:0d:a7:dc:2b:04:76:ba:07:b6:80:14:32:32:
56:d7:fb:52:71:0e:cd:76:aa:b6:4c:17:3d:7f:a5:c2:2d:0f:
d2:25:b9:1c:20:74:7d:36:e0:a0:d9:c4:5d:a1:33:13:e6:04:
47:03:3f:b4:5a:72:f2:dd:08:59:5f:4d:c4:66:45:e1:45:3e:
d8:f1:80:1c:8b:f2:88:66:de:14:ea:19:68:c8:05:f7:59:c6:
5b:0a:49:aa:14:bf:6c:8f:4d:91:a2:c8:7d:b7:c8:3e:cd:c1:
e8:e7:b0:e0:80:5d:46:e4:cf:f4:ed:8d:23:f1:ce:49:0c:22:
93:19:d1:38:5d:91:f2:11:7f:db:3b:10:38:06:ac:83:ca:55:
1b:66:95:4b:d0:66:f5:46:55:4b:bc:f4:a3:0a:fb:11:b5:38:
60:ea:73:af:9f:c6:c7:2f:d6:09:5b:67:2b:17:9f:f5:68:ce:
e7:91:77:18:01:f0:0f:bb:93:d3:6c:57:3a:a9:88:84:c2:d1:
bb:8d:3c:d0:f2:5f:18:bd:60:a6:97:a3:84:44:ed:f1:2a:0a:
d3:9c:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:36:19 2025 by rpki-client