Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: /Ldg9MSQf83AU4itYfbDYz+Fh5n42VfOiV6oT+cEosw=
Subject key identifier: 2F:0F:DC:FD:D7:B4:EA:21:27:E6:35:EC:F8:57:15:D7:22:46:5E:75
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0196B6D977F5D2D940E2B1C20C7C42A720BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 21:00:27 +0000
Manifest this update: Fri 09 May 2025 21:00:27 +0000
Manifest next update: Sat 10 May 2025 21:00:27 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: EnXXyWyp0gxxg6JZER7I2O1+BLIF7UC7Z9Hm3hkUko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:77:f5:d2:d9:40:e2:b1:c2:0c:7c:42:a7:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: May 9 21:00:27 2025 GMT
Not After : May 10 21:00:27 2025 GMT
Subject: CN=2f0fdcfdd7b4ea2127e635ecf85715d722465e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:53:e4:ca:3d:b1:f4:06:bd:fe:c4:10:79:
a9:4a:7a:65:bc:b1:c5:34:04:27:98:4a:1f:91:a2:
db:5c:e0:f6:a8:3d:29:11:52:83:fb:2f:0e:e4:9d:
cb:8f:3f:68:57:33:22:86:b4:f6:0d:8a:b1:d5:13:
13:03:b2:e4:a4:e1:8b:57:0f:ed:40:64:e5:49:40:
5b:f1:8a:ce:3a:98:1b:86:31:c1:0b:61:f4:1e:8c:
c5:89:34:f8:8c:6d:e7:62:22:fe:72:e6:99:f2:58:
59:b4:11:16:8c:c3:55:e2:10:89:00:38:ff:ee:72:
b7:a4:b2:35:5b:cc:9c:d2:2f:47:6c:27:e5:46:95:
91:16:6d:0e:f2:b5:db:9a:42:76:e6:0c:f5:0e:69:
a2:ba:8b:d7:96:5a:8e:1e:b1:28:0f:b9:9c:2b:2e:
e9:13:8f:45:58:d5:06:a3:53:3b:b7:be:47:8b:c4:
84:ce:d5:7b:64:96:40:9d:36:4c:a6:32:3a:b2:25:
3c:10:52:f5:25:b9:e1:e4:17:72:fe:9f:a7:32:9d:
a2:7e:b0:aa:d3:4c:c5:ca:5b:23:17:2d:b0:76:25:
f1:84:a4:12:f4:80:ec:b8:d5:58:48:09:ab:d5:60:
f4:72:54:2f:84:75:16:93:4c:62:d8:8e:3d:f0:26:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:DC:FD:D7:B4:EA:21:27:E6:35:EC:F8:57:15:D7:22:46:5E:75
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:5d:2d:5a:22:07:65:5d:5a:01:3c:8f:41:66:be:db:9c:
e0:06:0e:07:a5:e2:4e:6a:ab:c0:82:fa:22:f7:8b:a8:c4:32:
e0:60:50:2a:62:0e:2d:ae:d6:1e:42:b4:a7:c7:21:d6:f9:c7:
fd:51:f2:20:19:50:95:89:2f:96:c6:a0:5a:8d:67:22:60:54:
1e:dd:01:23:ba:94:e5:bd:6b:d5:4b:87:74:91:08:15:bb:3c:
0d:84:86:34:a3:8f:92:a5:d5:43:63:dc:70:02:2b:4e:4b:66:
b2:ab:ed:92:79:c7:34:dc:a0:c6:00:24:72:61:db:8e:5c:5d:
6e:b2:77:59:e3:40:b0:0b:16:07:ad:12:a0:71:74:df:1a:d7:
a5:5c:9f:ee:d6:b9:94:93:5d:48:4a:f1:08:1d:9d:d4:1c:63:
6b:c8:1c:6c:50:96:c8:88:57:6c:43:13:7b:fa:d6:4e:e0:60:
21:49:67:ce:f8:6b:47:95:12:4b:d8:a7:41:54:c4:86:09:46:
75:3a:58:39:10:c4:26:54:d7:08:3b:c1:ee:f3:4e:54:91:a2:
43:d1:70:8b:61:94:46:a6:63:e2:3d:57:56:30:5f:00:ee:71:
a1:f1:62:09:c6:6d:b8:80:ee:97:ed:25:6f:b6:42:d0:c8:08:
22:29:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:33:17 2025 by rpki-client