Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: jLvqCSkLbto+/ydL40Tu22/cVMV2YouWUYDubHstd3w=
Subject key identifier: 80:20:E8:98:14:B4:53:C4:EE:E7:B3:7E:2B:3A:33:B1:62:EE:D3:92
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 0196A12D8EFA8FB7CDD8C224EDBE543BFBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 14A5
Signing time: Mon 05 May 2025 16:00:39 +0000
Manifest this update: Mon 05 May 2025 16:00:39 +0000
Manifest next update: Tue 06 May 2025 16:00:39 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: izP0eah6LiZEqqV1pUBgMlQFXmIknECl2EFdYh+L7tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:8e:fa:8f:b7:cd:d8:c2:24:ed:be:54:3b:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: May 5 16:00:39 2025 GMT
Not After : May 6 16:00:39 2025 GMT
Subject: CN=8020e89814b453c4eee7b37e2b3a33b162eed392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:50:16:39:f2:20:26:55:e4:fe:16:44:22:
53:a7:3c:82:2d:62:2a:8f:fd:3a:eb:2f:76:6d:8a:
54:a4:5b:53:a0:c2:c9:05:25:ce:8e:a9:1e:cb:a6:
a2:6e:02:d4:e0:b4:27:65:3b:8f:f1:aa:42:a9:7f:
e1:8d:88:6d:4a:d7:b9:9c:70:bc:85:35:38:2b:9b:
f1:75:ea:23:56:2e:a5:7a:04:25:ee:8d:00:84:1e:
a8:98:97:92:0f:46:42:c4:03:4f:4a:53:80:ae:29:
e4:d5:6c:6e:a4:86:eb:54:30:d1:f8:b3:30:2f:da:
4b:40:c6:57:34:f4:da:db:65:c6:6c:11:2c:31:a7:
71:b1:0e:90:5e:11:3d:df:56:7a:d0:ac:6c:e2:46:
85:d1:cf:11:81:ac:14:07:ce:26:22:a7:58:fd:aa:
c2:40:cb:33:ec:f6:ef:a5:e4:87:bc:4f:fe:54:28:
ab:52:25:1f:cb:33:aa:ab:1d:fe:8b:6a:36:5b:44:
c2:00:ba:df:1d:0c:af:95:eb:5f:4d:69:25:d6:39:
75:ba:28:98:7b:10:4c:88:13:88:ce:a4:5c:25:7d:
86:ad:68:4a:b6:63:3f:1a:0a:b0:c7:13:39:c3:5d:
50:18:de:de:13:20:53:d3:90:65:2f:64:72:2c:2e:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:E8:98:14:B4:53:C4:EE:E7:B3:7E:2B:3A:33:B1:62:EE:D3:92
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:78:bc:a4:8e:2e:89:23:a9:3e:1c:ca:cd:00:9f:db:8d:dc:
ec:f3:cf:b2:5a:43:fb:a4:97:e8:37:85:96:54:dd:25:47:d0:
88:93:c2:7f:50:9b:04:98:8f:90:45:f8:9f:67:9b:36:d7:3b:
5a:42:0c:e7:54:e1:65:bc:1e:47:cb:ad:38:38:d8:1c:e7:67:
88:24:90:97:b9:fe:68:fb:0c:13:80:36:b6:75:1a:e4:75:76:
c4:60:47:52:7c:e6:76:20:d9:5c:80:97:67:3f:a4:e5:10:01:
72:69:fe:55:0f:a9:5f:de:a7:cf:ca:bd:f8:ac:b6:98:79:b9:
8f:6b:06:37:a5:2f:1d:3f:a1:21:71:db:9d:11:b9:46:e1:e7:
4d:68:46:3d:85:89:ea:8d:e2:03:cf:42:97:c4:01:58:38:51:
4b:0e:6c:3d:5a:72:45:d8:fc:d2:8f:5a:b5:d6:6d:ae:18:e4:
1b:d9:69:70:0a:07:58:72:b7:44:db:84:ba:03:eb:27:85:ae:
8c:4d:16:14:f1:78:d7:14:6c:5e:6c:59:f8:93:b4:d0:1b:e1:
b2:77:5e:45:03:3c:d4:f8:9b:44:1e:cb:51:c9:21:2c:a9:58:
03:a8:6e:b0:21:e0:2b:4f:9c:58:18:7b:e7:fc:4d:e6:17:5a:
90:b0:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:06:26 2025 by rpki-client