Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File: VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier: OeZoMMJ6J0Xdk7eWU6ZVYVmH9Zh9tFy14haGDX8vV2E=
Subject key identifier: 02:12:BD:34:28:DD:95:76:09:05:CF:07:60:98:5A:CB:1F:00:2F:82
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 0196BD494263AE58752F5052A5ABD0202BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 03:00:16 +0000
Manifest this update: Sun 11 May 2025 03:00:16 +0000
Manifest next update: Mon 12 May 2025 03:00:16 +0000
Files and hashes: 1: 4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa (hash: /pXE4tdwv3dfHDvdrnJG5/fTpZ3e7ceFkxfrRASJi2o=)
2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: JP7+7DBICjhSgGUcbQVi52iFCLbqT3g49v1oznA8Wqg=)
3: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:42:63:ae:58:75:2f:50:52:a5:ab:d0:20:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: May 11 03:00:16 2025 GMT
Not After : May 12 03:00:16 2025 GMT
Subject: CN=0212bd3428dd95760905cf0760985acb1f002f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ac:e5:e8:ca:38:9c:2c:60:46:e3:48:2b:c8:
39:82:5c:4f:27:15:a6:0b:27:8a:70:60:e6:d6:85:
b5:92:8d:63:12:bb:8d:4d:36:40:38:15:29:51:64:
94:83:9c:bb:ed:bf:e7:5d:b6:8c:11:1d:07:43:d4:
59:20:4d:28:c3:4e:00:98:47:f1:59:2a:3a:69:37:
54:2a:a7:ac:93:65:6f:6c:13:0b:69:29:d2:bc:51:
40:a2:3d:e3:4f:3d:a5:f9:4c:c9:57:95:3e:74:e2:
b0:4a:cb:09:fa:13:c0:7f:74:91:f0:83:f8:96:ce:
cd:ba:0c:1d:35:95:17:a7:45:7e:58:61:8e:1b:65:
f6:8c:05:9e:d7:10:3b:8e:11:42:92:e9:1f:a3:06:
19:ca:db:b3:52:fd:58:2b:c3:73:3f:3e:3b:31:a3:
e3:7c:b1:0b:44:80:f2:25:fe:48:b3:86:9c:d8:bd:
1b:ec:f6:f7:26:72:ef:b4:df:5b:11:81:85:1f:4e:
42:e5:50:8e:ca:59:c8:cf:89:97:c3:3a:4e:63:31:
65:09:85:03:ca:cf:26:e3:71:1b:27:64:28:62:3c:
5c:3d:b7:5f:fd:8d:34:25:21:51:9b:59:a8:b9:07:
e5:9b:27:2b:bf:3d:63:ff:3f:e9:a2:12:89:1c:0d:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:12:BD:34:28:DD:95:76:09:05:CF:07:60:98:5A:CB:1F:00:2F:82
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:55:c7:a1:ae:5c:73:ba:9a:70:c0:7d:00:f4:cf:bf:2f:a3:
55:8c:b7:5e:62:ef:a8:c0:3e:2e:99:9d:9d:50:07:ac:bb:5c:
9f:cd:6f:93:cc:83:34:7e:96:fa:80:c5:98:65:ee:e8:86:5c:
96:25:5c:f9:40:f7:5c:72:de:0b:a8:5f:73:17:32:6e:28:51:
8a:99:66:d8:9d:01:53:74:22:97:01:fb:7d:af:94:52:10:c2:
ff:cf:df:96:ee:37:12:c4:a1:8a:91:9f:19:6b:c4:e2:e1:94:
b8:26:8d:86:b9:e7:66:4d:3c:1d:15:8f:b4:d4:6f:b6:ca:51:
97:9a:11:56:d4:48:63:ea:4d:85:cb:18:59:fb:51:ba:ec:ac:
6a:d2:08:6c:5d:f7:39:93:be:b5:63:aa:e0:0d:53:18:1e:98:
f6:0b:91:d5:94:75:79:f5:ac:26:2f:2c:74:77:01:f8:a9:a2:
94:d6:74:67:a3:77:46:25:18:e4:c6:16:07:a2:9d:99:28:d0:
4c:21:4b:2f:82:f1:65:e4:61:cb:90:04:cc:f4:a7:72:44:f3:
8f:23:9d:b6:ca:3f:95:ae:a7:22:59:41:f6:76:27:60:a3:c1:
fa:82:bc:72:da:01:18:e4:27:18:2f:e9:f2:a9:82:e1:04:24:
3b:ee:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:41:48 2025 by rpki-client