Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: v0bhtJER3/W65txNFM/zoh0icJi8Mz4Pv42nroJqG94=
Subject key identifier: 24:A5:9D:E4:56:B2:93:95:C7:8A:46:B0:AF:59:3E:33:83:65:4E:DA
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0196C45E3D2AF4FB4EC6C3314E77A0BE1549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1015
Signing time: Mon 12 May 2025 12:00:32 +0000
Manifest this update: Mon 12 May 2025 12:00:32 +0000
Manifest next update: Tue 13 May 2025 12:00:32 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: 3N+rP/hMTfD3h5GhcUgXPx38b+7widReiuA/F5fHgbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:3d:2a:f4:fb:4e:c6:c3:31:4e:77:a0:be:15:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: May 12 12:00:32 2025 GMT
Not After : May 13 12:00:32 2025 GMT
Subject: CN=24a59de456b29395c78a46b0af593e3383654eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:39:d0:3c:57:2a:b4:6a:ec:6b:ce:58:5f:
ba:e3:e5:1f:f2:20:93:01:82:6a:4c:3a:f9:08:8c:
a9:27:70:02:62:d3:b8:c2:86:b2:f4:30:8b:fc:a4:
b6:d0:63:27:d1:01:94:8b:4b:25:96:3f:88:77:79:
d6:86:7f:3a:6b:cd:39:b2:68:a9:3d:c9:56:23:c1:
8f:39:0b:77:e1:ae:47:2f:87:10:3f:f7:43:75:c1:
b7:d5:dd:a4:ed:f0:88:6c:a0:60:49:5d:60:1c:6e:
aa:a8:d2:6a:90:7b:79:f3:cd:df:25:95:b4:45:fd:
dd:8b:c1:0e:17:dc:a9:81:bf:71:6c:a4:31:db:8e:
79:ff:e1:cc:f1:1f:62:5b:9f:e9:e3:93:31:51:03:
49:0d:20:a7:cf:36:fd:93:11:3c:1f:de:dd:cc:10:
6a:b3:68:2a:61:f1:e2:b9:33:ba:fb:e8:63:ea:f2:
ee:88:66:32:e4:97:7d:2f:b4:3f:57:e2:3c:a6:c3:
46:d3:c8:fe:cb:e0:6a:f3:6e:ed:59:fb:b3:ea:d4:
96:d9:e0:d4:36:16:34:3e:1d:d6:f2:38:da:82:a9:
4f:37:b6:90:5b:95:d2:48:98:0f:cf:5d:a7:33:3f:
25:b2:bf:ec:f1:44:67:4a:2e:bc:cb:42:87:36:9f:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:9D:E4:56:B2:93:95:C7:8A:46:B0:AF:59:3E:33:83:65:4E:DA
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:7a:37:d3:79:dd:f1:0f:68:28:20:3a:57:84:ea:0e:74:
18:3a:7d:ce:2b:89:db:b0:42:f3:3e:64:ca:9b:d6:bc:85:3b:
d0:a1:e5:c7:ed:bc:b3:06:1c:50:03:68:8c:e0:89:31:d7:69:
8b:bd:b7:1b:ac:14:f8:bc:56:c5:14:5b:34:48:ea:d2:96:61:
43:b4:bf:95:5e:f6:7c:d6:fb:21:a1:07:76:f1:d7:09:43:17:
d7:d4:ae:4f:ad:6c:28:ed:3f:ca:a3:44:da:fd:2d:b7:cc:79:
ac:a6:f7:84:ce:83:e3:d4:0e:00:0e:53:27:0e:59:40:95:75:
c6:ad:6f:4d:7b:63:4f:7e:33:a3:71:14:d7:6a:75:cf:df:fa:
b4:ee:0e:6f:e9:66:97:b3:40:83:0f:c4:3d:a4:1b:ac:76:59:
1d:4f:76:ba:55:65:d8:82:b9:09:ee:d1:cd:b7:d3:cf:c4:6a:
88:ad:a8:c8:c2:83:20:73:16:19:8f:cd:a5:44:a7:7e:54:1c:
82:da:c1:48:e1:16:ec:42:91:d1:26:b4:d1:e3:60:8a:37:4c:
1e:b2:a3:87:ca:b6:45:a6:36:42:ad:d8:8e:11:1e:18:81:d9:
f2:48:0d:28:ad:01:cd:7d:6b:82:2a:4d:06:d6:f8:95:70:7d:
33:18:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:07:04 2025 by rpki-client