Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: DNJBxKAN4U+mem4/RlCYEMGeUy1CevX3/CAefE11Tiw=
Subject key identifier: 97:FD:70:81:51:FE:F9:A3:9F:A8:E3:30:C9:3C:88:61:BE:7A:1E:83
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 0196BF37B42CB832CF855902F858916DF722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 1A
Signing time: Sun 11 May 2025 12:00:20 +0000
Manifest this update: Sun 11 May 2025 12:00:20 +0000
Manifest next update: Mon 12 May 2025 12:00:20 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: MC99r6lJv29AGr0rV3kjTJ50Ws8npVUIvWZ/Vrn3Z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:b4:2c:b8:32:cf:85:59:02:f8:58:91:6d:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: May 11 12:00:20 2025 GMT
Not After : May 12 12:00:20 2025 GMT
Subject: CN=97fd708151fef9a39fa8e330c93c8861be7a1e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:75:77:c1:75:11:ed:40:81:0a:d4:40:a1:
0b:91:2b:c1:cd:c1:eb:91:1b:78:43:e3:6c:da:8a:
48:da:94:12:c3:3d:9a:0f:6f:dc:48:39:55:c6:7c:
64:0e:b0:7b:c5:8e:7e:99:47:61:4a:74:ab:91:b5:
81:02:fc:e3:c8:dd:27:ce:70:58:96:b2:7a:80:32:
58:ae:9c:e1:7e:d7:75:13:1b:bb:e8:db:87:a6:29:
81:9e:37:6b:fa:56:14:07:3a:94:72:00:38:65:4d:
25:b8:5b:5b:1c:fe:33:a7:50:9a:ec:85:cf:bb:ab:
b8:33:7a:93:33:e8:ad:48:ab:76:18:0f:d7:05:8a:
72:d0:f8:0e:61:fd:92:e7:8f:34:3c:49:bf:e7:8f:
08:27:a1:f2:57:08:66:1f:33:07:40:3e:a5:f4:8c:
7f:eb:ae:26:f1:18:61:8b:93:7c:4e:aa:fa:8f:d2:
6b:f1:d1:35:ef:f8:42:28:c3:d8:86:38:21:82:90:
15:49:2d:45:77:12:2c:64:d1:e5:74:b9:fb:7f:10:
c4:de:de:26:fe:48:44:a2:dd:0a:b3:77:5a:2c:17:
b7:f4:8e:92:c9:0c:35:5b:7e:45:eb:9f:4b:56:e2:
bd:0c:fb:5f:7d:4a:d9:de:27:c4:cd:b6:4a:b3:c6:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:70:81:51:FE:F9:A3:9F:A8:E3:30:C9:3C:88:61:BE:7A:1E:83
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:df:4c:d0:b1:95:ab:fb:e8:93:e3:1f:3c:ff:39:3f:c9:f1:
b9:80:bd:5d:e2:27:c1:3f:54:de:92:b7:a5:81:82:53:dd:9b:
d2:d8:aa:5c:dd:29:46:a5:b2:31:e6:10:0d:e2:bc:50:14:f9:
5e:29:a1:d0:bd:29:c9:04:0c:e8:30:60:55:c9:e9:55:c8:91:
51:4e:b1:57:a9:f6:12:3a:9a:2e:19:92:fb:b5:63:86:e0:75:
8a:71:b8:54:90:98:f8:ba:1b:3d:bc:d3:76:ac:9c:86:bf:d3:
9d:2c:f9:09:8f:1e:50:93:9a:5d:ad:cb:41:5f:b0:ad:d8:4d:
db:f2:0c:8f:89:c7:82:db:14:74:e8:2b:6b:e2:cf:f2:b1:dd:
e7:42:28:c0:41:9c:5a:05:45:60:ee:12:36:bd:70:66:6d:5e:
a1:3b:03:ae:de:0c:6d:20:ae:da:0a:07:00:25:22:84:b4:3c:
64:86:73:73:c3:a9:b9:11:36:71:7d:67:e6:ba:ff:1d:3a:0f:
b2:a4:a9:53:12:17:bb:7e:3b:2e:9c:46:eb:cc:92:61:2a:3a:
00:2c:a6:37:65:88:3b:f4:ab:a3:5a:a0:a5:15:39:a2:09:db:
f1:66:ae:83:f9:b6:a2:40:78:c8:a7:72:8e:55:5e:92:47:35:
36:c7:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:26:24 2025 by rpki-client