Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: bCbft/jGr46vbyh20w+Rulq4LSKepyfRp7IJuNkbLGo=
Subject key identifier: 99:B4:75:C7:E6:67:7B:7B:BB:EC:3B:29:94:E7:06:5A:32:02:17:AE
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 0196CCBCA94EA6C21885D5CDBA4877AB128C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 03B6
Signing time: Wed 14 May 2025 03:00:38 +0000
Manifest this update: Wed 14 May 2025 03:00:38 +0000
Manifest next update: Thu 15 May 2025 03:00:38 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: m5wQ7UZKt2U7SF5SBKDXePYeXooKMR17+VLfJFAhTlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:bc:a9:4e:a6:c2:18:85:d5:cd:ba:48:77:ab:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: May 14 03:00:38 2025 GMT
Not After : May 15 03:00:38 2025 GMT
Subject: CN=99b475c7e6677b7bbbec3b2994e7065a320217ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:cb:8d:f3:ce:84:d1:4a:ad:5f:0d:c7:30:
5b:d2:c7:34:ad:7d:6d:06:ee:8e:07:41:65:4a:23:
63:d9:b4:ed:40:b1:84:06:1f:9b:45:44:37:28:a2:
2c:63:f4:13:af:d3:a0:64:b2:ff:7b:a7:f7:98:3d:
cb:75:2f:c8:1b:c5:8d:56:38:a4:18:42:5a:d6:4d:
44:2e:98:29:93:7f:86:11:32:dc:c1:c6:92:85:c9:
04:2a:1c:4a:a3:d5:c2:ce:82:5a:7f:5d:8a:77:21:
84:e0:3c:60:47:22:84:f8:12:38:88:6e:41:3b:b8:
f4:21:5b:56:1d:21:2e:ae:75:19:a5:b7:a0:62:39:
c7:d3:2b:5b:50:64:aa:7b:96:ca:cc:51:eb:84:e7:
e9:59:ee:6c:cf:48:da:20:d9:7e:30:d3:54:56:28:
44:38:97:f2:7f:c5:f2:f9:18:23:00:1e:8d:b0:ca:
ff:26:c7:d0:0b:06:77:d0:a0:2a:c6:fb:a4:32:67:
df:df:89:fb:33:99:63:e3:fb:75:8a:78:3f:c3:1d:
2e:bd:33:f2:48:00:5f:5f:be:ed:d5:6a:d7:29:7e:
7c:2d:3b:39:d0:9d:09:5e:fa:73:07:d4:89:18:1c:
dd:49:23:62:22:c1:16:91:ca:b0:2f:49:af:3a:9a:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:75:C7:E6:67:7B:7B:BB:EC:3B:29:94:E7:06:5A:32:02:17:AE
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:39:54:1b:b2:8c:35:b2:32:b1:8f:63:59:38:5f:51:8e:
e7:40:54:f0:a4:25:ba:e1:dc:61:6d:cd:94:b3:c4:a5:fb:be:
77:23:6a:72:6a:47:03:63:15:bb:51:ef:33:5a:70:ef:9c:eb:
96:04:fb:41:4b:3b:64:56:c9:c1:fe:ea:2a:59:7d:b1:e0:e0:
34:4f:67:2e:ce:43:dc:3a:7d:a4:53:2e:04:5b:52:4d:8f:f1:
15:ae:e3:50:b9:33:6f:11:bd:18:b6:54:17:f2:ab:67:96:91:
69:53:df:aa:07:44:46:fd:f6:12:80:79:de:1a:1c:a2:7d:eb:
ed:10:6a:a7:28:f1:43:bf:9c:95:a5:28:38:18:4f:a6:a1:6f:
8f:29:1d:a6:1e:ff:a3:a2:cb:2d:be:a6:a9:73:05:1f:49:e3:
a9:0a:6c:fd:61:37:dc:0e:b5:5e:6e:3f:68:1a:c7:c5:a0:67:
79:db:96:b6:82:3a:f3:e9:eb:ff:d8:9e:79:51:0f:7e:f1:ef:
5a:b5:e7:ae:83:d6:19:63:26:c8:89:6f:de:4b:e1:25:49:02:
06:14:31:45:eb:56:5e:40:17:8d:b3:06:31:a7:d1:ad:0f:50:
c1:c6:96:86:cb:28:1f:fd:23:4e:d7:9e:87:3d:81:43:bd:4e:
10:04:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:06 2025 by rpki-client