Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: G/pi1e1piI0IFOBSlKgvBi8EQe3+dYA1i9eVEK1hkrw=
Subject key identifier: 94:D6:3D:C5:84:AD:2C:B1:61:DD:ED:51:E6:2B:98:06:54:F2:AF:20
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 01969D880538D0F1C057DB4EF3CF4E31DA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 23:00:59 +0000
Manifest this update: Sun 04 May 2025 23:00:59 +0000
Manifest next update: Mon 05 May 2025 23:00:59 +0000
Files and hashes: 1: 46WoegmIkS8QL_J6FbxBkD87iiI.roa (hash: U0pIUVkWJNq7HiCSxGgpV90jaz+MKbll3yx6GCWcg+0=)
2: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: QEvddSWlbpQJsCDccfR5ILHYV/F2XasqA6kZskqSGp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:05:38:d0:f1:c0:57:db:4e:f3:cf:4e:31:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: May 4 23:00:59 2025 GMT
Not After : May 5 23:00:59 2025 GMT
Subject: CN=94d63dc584ad2cb161dded51e62b980654f2af20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:f2:9a:4a:6d:4e:3e:94:bd:a3:5b:6f:a9:
ef:84:68:0d:50:d4:90:72:45:d2:4b:0d:7f:98:e4:
b6:d2:38:ae:c5:d5:f4:5e:e0:a2:11:7a:1f:9a:fa:
39:84:7e:8e:13:c4:36:64:72:a7:ed:4f:7f:35:77:
bf:4d:9e:4e:91:3b:e7:63:c5:7c:95:7d:12:48:51:
e5:70:df:c2:ef:cf:83:ec:a2:0e:a4:57:86:3b:4c:
19:c5:ac:07:aa:75:3b:06:10:22:ca:bd:9e:bd:d1:
b2:5f:6c:f4:c2:31:9e:ac:b6:0b:75:34:59:90:ff:
f1:4f:f3:cd:0b:a9:90:75:a2:5c:71:67:fa:1b:2a:
64:44:e1:d7:2c:99:1c:2a:cd:5c:06:31:35:3e:a4:
92:98:32:61:61:b6:ec:d3:5e:c3:ec:20:78:3c:45:
80:e9:77:61:2a:20:8b:4c:97:ae:48:33:e1:f2:2d:
6b:82:bb:04:07:4a:74:1d:a9:60:c9:12:88:ad:8a:
d7:2a:7a:c0:df:84:a0:b9:66:42:5f:b3:fc:02:1a:
db:bf:51:65:ee:7f:3f:a2:a8:d8:91:a5:65:16:3c:
ae:b9:0d:b5:b9:7f:da:1a:0c:b7:fe:58:f1:ca:92:
1a:48:03:06:24:b6:8e:23:3a:d2:3c:bf:52:fd:45:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:3D:C5:84:AD:2C:B1:61:DD:ED:51:E6:2B:98:06:54:F2:AF:20
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:f9:fd:d1:df:5f:7e:08:53:2e:08:80:a9:52:64:54:64:
65:ee:3c:55:f9:ab:14:f2:35:bd:8b:6d:4f:79:78:b0:1c:9c:
0c:2b:16:f6:7b:92:0e:3b:6a:ba:fd:97:b7:c9:2e:c9:10:11:
5a:31:a7:97:7b:41:e3:53:54:eb:30:9b:34:1a:17:b3:c5:4c:
c0:83:a2:6a:00:94:a0:8d:16:7d:16:fb:08:28:44:1f:6e:db:
d8:70:5c:0a:78:c3:dd:57:d1:ac:0b:99:d4:b7:fc:96:bd:52:
74:77:ea:bc:e9:5b:08:dc:f7:49:eb:23:16:60:02:cf:00:ec:
64:a4:1f:53:bb:c4:14:c6:b0:ea:8d:e1:cf:9a:34:7d:ac:e6:
dd:ee:0f:a1:23:0a:53:10:16:bf:d6:f5:56:c0:ce:9d:50:0d:
65:06:ed:c7:65:1c:06:ee:64:d5:17:a6:1e:5c:a2:f2:7a:bb:
44:41:44:c2:b9:fb:6f:29:1d:a6:48:be:f8:db:a0:70:68:04:
ae:c0:03:27:21:17:8b:63:3b:cb:33:1e:39:cf:54:45:6a:e2:
50:f3:86:62:2c:d6:08:fe:92:a9:bf:60:e8:b0:67:d9:51:78:
09:f4:bf:64:66:d5:4e:25:4a:5c:16:95:8d:cc:88:96:6b:e7:
99:40:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:03:37 2025 by rpki-client