Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: KSttPWlQErcTsFNDgZzSlFpB9jFwKqctxlIay2qspwA=
Subject key identifier: 07:F9:D4:DB:70:4A:CB:FE:EA:2F:A9:F5:05:20:0B:E3:D1:24:46:FF
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0196C83AE90BAF82AE2E354EBDB1737C5604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 09C6
Signing time: Tue 13 May 2025 06:00:25 +0000
Manifest this update: Tue 13 May 2025 06:00:25 +0000
Manifest next update: Wed 14 May 2025 06:00:25 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 3+iRCEtc7Kp0hohvTrrGqdJx87BBVFQ2YUW2OT45Jrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:e9:0b:af:82:ae:2e:35:4e:bd:b1:73:7c:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: May 13 06:00:25 2025 GMT
Not After : May 14 06:00:25 2025 GMT
Subject: CN=07f9d4db704acbfeea2fa9f505200be3d12446ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:d9:ca:c5:85:00:3d:48:6c:c3:51:0f:fc:
51:3b:9d:22:97:fe:96:e1:3a:91:24:75:96:4f:55:
d1:8e:88:63:18:dd:98:04:a1:be:0a:ff:f2:d3:04:
bd:ac:3f:1f:a8:60:4a:69:65:86:63:39:1a:d6:c0:
09:9a:cf:6a:95:16:20:5e:bd:0c:dd:53:92:05:65:
4b:6c:78:1c:9f:95:2e:26:03:a8:3a:9b:1f:de:e5:
06:50:8c:48:17:dd:3f:4a:fb:22:0a:fa:67:60:c5:
25:7d:ea:d2:ec:05:2b:ea:e2:db:83:f3:77:57:f9:
6f:fe:18:34:68:96:5a:de:4b:cc:f8:c3:b9:46:2d:
e8:48:60:0e:c7:0e:d4:ed:76:44:1d:32:40:10:51:
45:75:24:f8:db:72:0a:d2:4f:a3:5e:f4:42:10:e1:
1c:de:f3:e3:80:77:99:26:d9:24:58:33:52:56:88:
1b:0a:41:b0:77:20:67:d8:64:b9:ed:c8:5b:3f:b1:
c4:ea:70:c7:1d:59:99:f1:dc:d4:89:ef:f8:f9:b0:
06:3c:1d:ba:5b:ed:81:56:62:68:56:7c:72:75:f3:
6a:e2:2b:df:ed:e4:c7:17:7b:a5:76:cc:fa:84:a6:
95:a2:17:0a:62:b2:84:86:39:c6:7d:8f:a4:42:22:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:D4:DB:70:4A:CB:FE:EA:2F:A9:F5:05:20:0B:E3:D1:24:46:FF
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:83:4a:38:a0:df:ad:00:bb:0d:4f:56:c8:7f:81:88:7b:
e2:04:62:5b:2f:ef:b7:e8:06:89:02:80:f5:52:6e:3e:17:17:
67:ad:00:2d:4f:e6:7b:76:7d:4f:28:85:9b:e3:c2:b6:b2:c7:
1f:dc:82:21:9a:36:11:69:b2:d0:39:52:8d:34:a1:c6:75:f0:
29:5e:14:c2:da:0b:bb:f2:1d:53:60:bc:2c:0d:e8:95:38:a8:
f8:c7:ff:e3:98:34:d5:e0:93:be:47:60:2c:de:5e:89:52:b8:
a5:a8:80:03:bc:11:8a:76:f1:c6:89:60:9e:47:e0:ea:47:51:
e1:d6:c5:c5:a7:3a:b8:71:99:f8:48:8b:2e:65:5e:a7:69:6d:
f4:14:a7:ce:a9:75:c0:81:73:60:17:de:5d:dc:6b:a7:85:cd:
5a:0f:10:2c:88:16:f4:d1:2a:42:ba:72:10:87:c0:cd:98:43:
20:51:49:e3:fa:cf:77:52:38:ab:48:98:f1:d6:6e:70:1a:94:
3d:a8:34:27:39:da:43:66:d6:66:6f:ea:6d:b9:2e:20:5f:d2:
ef:cb:85:c6:14:9c:82:62:ff:bd:d4:32:f1:ad:d2:8d:29:bb:
ae:89:51:12:64:e6:17:ef:a7:2b:4f:ef:3d:6a:75:be:a6:47:
a4:8e:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:51:57 2025 by rpki-client