Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: Mz3em2kiw8/PAcauHJjMl5b9D5+ILCeih16X2JIM1PI=
Subject key identifier: BD:27:08:80:57:F1:28:E2:1B:4A:28:AF:FE:BD:B4:A9:5B:50:EF:BA
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 0196BD80E3247E9692E36D33770CCDD652DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 04:01:02 +0000
Manifest this update: Sun 11 May 2025 04:01:02 +0000
Manifest next update: Mon 12 May 2025 04:01:02 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: fgiQ0ycwzz4U6zwczpV7dI/c5Sxzlx1qnkVKx4V5++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:e3:24:7e:96:92:e3:6d:33:77:0c:cd:d6:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: May 11 04:01:02 2025 GMT
Not After : May 12 04:01:02 2025 GMT
Subject: CN=bd27088057f128e21b4a28affebdb4a95b50efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:cf:84:84:c2:62:0e:24:93:5f:8a:40:78:
de:74:6c:27:42:ea:a6:de:0f:59:15:10:d6:58:14:
3f:26:80:e2:b8:b2:f4:34:18:cf:18:3e:ef:59:d6:
bf:68:81:03:00:54:85:c1:8d:eb:d7:02:dc:ac:fc:
59:2a:19:df:06:bf:e6:4d:87:f4:3c:27:30:63:55:
c0:d7:ed:28:07:3f:c1:82:40:a1:08:64:e5:3a:b4:
d1:0d:07:60:92:b1:d8:c3:2f:1f:1b:f9:40:c8:15:
a6:e8:3d:e9:d7:40:e8:e5:32:69:63:38:78:04:ae:
73:10:b7:d2:a7:b7:b3:02:0e:43:c2:61:5e:da:a0:
7b:5e:3a:40:9c:84:ee:22:04:54:a5:34:25:a7:b6:
07:df:e4:17:2b:0c:4a:ad:9e:62:f9:be:86:b2:78:
d4:ad:70:51:0d:7d:4d:72:90:5d:35:ca:0a:72:3d:
12:c9:0e:7d:54:f9:2e:33:6e:78:79:22:2c:61:da:
e4:3f:01:07:75:6d:fe:54:3b:2e:1d:fb:e8:68:49:
ba:db:c2:d1:4d:83:2f:76:ae:d2:f6:ad:16:89:a7:
42:01:e1:93:6f:d6:a2:67:04:84:5e:0c:19:30:1e:
90:69:23:39:5e:5c:a1:ab:3e:8b:72:c3:36:6f:d6:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:08:80:57:F1:28:E2:1B:4A:28:AF:FE:BD:B4:A9:5B:50:EF:BA
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:77:82:d9:ae:d1:91:95:89:9d:e0:85:95:96:2c:95:98:
cb:f6:ba:a7:fd:17:08:18:c2:d8:d1:95:79:c3:1b:ab:ae:26:
0c:74:bb:90:37:13:52:fb:ba:c9:ab:90:5e:0b:f1:11:3d:97:
4e:31:92:f8:43:6a:a1:d9:84:ec:c4:87:8c:8b:c9:96:85:e2:
d3:00:39:ce:73:e0:9e:9e:84:2f:1a:dc:63:b8:26:e3:83:24:
dd:a2:38:8c:c8:b1:02:5b:04:8e:b6:60:a8:76:47:c1:24:c8:
8e:ff:09:5b:4e:5a:95:a0:24:38:49:b1:69:0a:68:77:8f:a9:
62:da:38:85:cc:ba:bd:81:69:db:8b:b8:2a:55:93:05:03:a7:
09:0b:dc:0e:04:08:18:fb:aa:d1:62:99:46:2b:24:da:d3:54:
09:8a:b1:41:d4:a3:4a:2c:a9:15:02:49:89:c7:86:a4:70:05:
be:9b:e5:93:3f:5f:a3:06:44:4b:c8:ee:45:6a:f2:e0:dc:20:
b5:bc:33:ca:36:4d:c4:41:aa:cd:9b:e8:61:71:df:ba:ad:66:
b6:0b:30:23:a4:64:1b:be:29:12:dd:2a:2c:19:d7:7e:cb:7c:
80:04:d2:f6:56:08:6d:29:90:97:96:45:14:fd:00:cb:c4:fa:
19:95:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:17:35 2025 by rpki-client