Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: BHHELWpnDL5OMYkTa3S2GS4UkDT26la1u+U1NzIxLVM=
Subject key identifier: EF:C6:52:36:7B:CC:64:D7:7D:F8:42:0A:38:D3:4C:B1:63:38:87:68
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 0196BDEEC299AEE3D1479601E721618C1AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0A30
Signing time: Sun 11 May 2025 06:01:03 +0000
Manifest this update: Sun 11 May 2025 06:01:03 +0000
Manifest next update: Mon 12 May 2025 06:01:03 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: N2v5lKb5It+wP4FLC71LxAyq+zEfiVhT+5cxlkpE6+0=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:c2:99:ae:e3:d1:47:96:01:e7:21:61:8c:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: May 11 06:01:03 2025 GMT
Not After : May 12 06:01:03 2025 GMT
Subject: CN=efc652367bcc64d77df8420a38d34cb163388768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:a4:60:02:c1:f5:ac:dd:1b:bc:c2:1e:c2:
d7:b5:e1:8d:94:ea:de:54:1d:0b:5f:03:cb:cd:49:
a9:54:03:c9:34:ab:f3:ea:c5:8a:f1:a6:84:6e:7b:
74:5d:bb:45:e0:2a:3f:75:be:9b:0d:41:10:65:41:
85:8d:ca:ae:28:74:3c:b4:00:ea:9d:1e:0b:db:6d:
d9:db:43:55:92:0e:12:18:3f:5f:17:02:8c:a8:36:
27:3b:75:dd:81:da:6b:71:44:49:be:81:ce:3c:44:
5d:21:07:6f:f1:a6:6d:d6:2a:18:49:89:be:77:a3:
bd:4f:26:52:da:2a:f6:2f:83:3d:c5:f9:ee:78:7e:
22:95:fd:1b:10:8d:07:59:5b:cf:37:f2:a4:b2:58:
96:f7:77:fe:0e:d5:8a:90:63:83:e0:56:1c:fe:91:
8a:43:e9:69:6c:8e:7d:f5:6e:14:57:ba:3c:60:20:
72:a4:49:f3:87:18:89:19:12:51:89:4b:65:7c:38:
59:49:45:74:e7:1f:56:1b:4e:36:fd:c2:bd:fd:e7:
0e:c6:e9:04:89:c2:08:e7:97:18:c1:e3:2c:4d:ee:
c0:d5:67:47:37:15:11:41:bd:57:aa:d8:34:4e:2c:
d2:91:16:f3:a0:4d:d8:9f:3f:58:2d:c3:cb:b4:2d:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:52:36:7B:CC:64:D7:7D:F8:42:0A:38:D3:4C:B1:63:38:87:68
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:00:c1:93:25:70:ee:3b:d2:be:83:5c:50:38:42:5f:a9:
d1:be:a1:a5:5c:27:c9:cf:3f:13:01:00:e2:5a:f0:0f:be:89:
f5:3d:dd:a6:ff:ad:af:d1:62:1e:68:56:21:91:63:ca:0f:40:
1a:22:37:84:06:9a:f7:ee:60:cf:64:21:0c:8a:ae:af:c0:d5:
45:97:7d:d3:77:20:28:f1:d0:c3:46:a9:43:e9:c7:19:7f:92:
01:f0:17:46:72:43:1f:3d:7b:2d:ce:48:fd:97:39:d4:26:f8:
38:8c:95:11:6c:9a:66:c9:00:ed:a4:b3:87:f0:af:f5:c7:fe:
bf:0c:97:5d:09:4d:14:cf:59:94:c4:96:31:30:0e:3c:96:a9:
68:2b:f9:04:42:11:2f:31:c1:84:d3:8d:e3:77:37:17:34:0f:
1f:a0:2a:7d:bc:2e:40:ec:23:28:4b:e5:c3:a1:27:08:d1:86:
e2:44:e5:62:e9:b0:f8:b4:ed:ef:1c:1c:95:54:fc:ce:55:39:
08:d1:b5:0b:6d:90:4a:b4:62:a3:38:cd:f7:70:0d:39:37:13:
29:8f:0f:b5:0e:a7:19:c5:1a:0b:df:0d:b2:34:a2:27:4a:4a:
95:0e:c0:c3:80:e7:2a:ec:49:50:4f:b1:63:8e:83:62:1e:3d:
c9:24:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:34:12 2025 by rpki-client