Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: kiKzUlGYny5q0/fkOGdq3RLEs6IQERTf5AuW2KQdaNM=
Subject key identifier: 62:6A:A2:C1:A5:1D:98:59:A2:D0:42:DC:73:05:39:E0:D1:BA:C6:0B
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 0196ABB145BA5530FB5F0BED1D9AEDF8D58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1565
Signing time: Wed 07 May 2025 17:00:43 +0000
Manifest this update: Wed 07 May 2025 17:00:43 +0000
Manifest next update: Thu 08 May 2025 17:00:43 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: MNOv1RJlf+H75Q+6Ajf0nYS9+VrWU0u42JiZIVbUcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:45:ba:55:30:fb:5f:0b:ed:1d:9a:ed:f8:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: May 7 17:00:43 2025 GMT
Not After : May 8 17:00:43 2025 GMT
Subject: CN=626aa2c1a51d9859a2d042dc730539e0d1bac60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:92:09:b5:31:11:5d:6c:53:46:6b:33:a5:
73:b2:22:43:4b:90:4c:31:3d:20:fc:1c:62:b2:12:
31:11:c9:be:b4:c0:70:b6:b4:67:f3:5f:f5:7e:3f:
44:4e:fe:58:d5:f7:38:ea:ec:05:4b:84:7f:94:d1:
1d:a6:e5:30:da:ad:aa:fa:12:4a:a5:2a:5f:9a:0b:
62:d3:65:41:82:78:80:92:ea:4d:a0:77:bc:ae:21:
b4:63:42:fe:48:02:09:f7:85:b9:eb:98:da:96:d6:
47:5d:48:62:57:9f:09:28:77:3c:56:69:91:83:3b:
fc:15:f8:49:64:34:0f:62:02:b9:48:cc:c2:63:04:
99:c7:fa:e5:79:3f:10:b4:04:9f:e4:85:6c:f6:8e:
8b:35:71:92:6e:57:ac:55:bb:1b:8f:25:14:66:ba:
96:bb:8b:23:09:5d:24:71:7a:4a:59:59:54:16:d3:
d1:7f:1e:db:de:be:60:4f:3b:91:0b:3f:b6:62:03:
92:cc:28:ca:a3:78:ec:f0:fa:60:c3:0e:81:70:06:
32:b8:7f:3f:b0:04:d1:72:12:f1:a6:ea:c1:99:06:
da:f6:02:f3:4d:0e:59:a8:0e:99:42:40:59:0c:70:
a7:d5:d6:70:7c:55:1b:98:4d:cd:62:96:66:13:be:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:A2:C1:A5:1D:98:59:A2:D0:42:DC:73:05:39:E0:D1:BA:C6:0B
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:18:ef:97:83:58:73:0d:7c:e9:52:c7:b6:bc:d5:50:7c:
95:87:5c:e5:88:04:40:67:93:2f:e2:cc:ea:45:41:2b:37:6d:
65:a2:ef:60:d4:2d:b1:c0:73:88:64:54:3e:d5:a2:9b:a1:31:
d1:5f:3d:1f:92:59:f8:99:83:29:bf:9b:04:56:fb:42:b0:1b:
8e:f1:3d:45:12:ec:b5:b0:fc:f2:9a:63:a9:f5:ce:da:77:84:
b2:17:11:36:bd:61:b2:04:1c:67:b3:c7:85:2c:a8:91:b4:3c:
6d:55:ca:da:f0:37:eb:2b:77:54:c4:0c:3c:c5:47:3b:9c:fe:
54:ad:bf:d4:7a:19:27:11:3b:69:e9:35:b8:52:9d:99:19:77:
4f:84:e9:d9:f4:c2:e0:c4:95:8d:58:10:b0:09:2b:ae:15:a9:
fc:c8:15:a3:8c:22:cb:01:1a:d2:7a:ed:35:92:2b:fa:ba:ea:
c0:b3:53:4d:9a:df:7c:b0:76:99:b7:6c:68:74:eb:70:09:34:
7f:90:e4:6a:7c:de:48:50:94:2c:94:50:84:0f:2b:ce:62:64:
47:ba:12:85:1d:72:ed:d1:ad:13:c1:35:16:1d:ba:72:e0:b8:
45:4a:33:fe:4b:d1:1f:26:5c:e5:d4:4d:62:54:ff:86:44:97:
c9:e8:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:03:55 2025 by rpki-client