Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File: vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier: F9LZlCiuEJpENl3fawEK3LheIINa3qjghsLMGRZar9E=
Subject key identifier: D0:E6:8B:14:54:4B:C2:5D:8E:63:60:09:53:1F:52:5D:E9:BE:D8:AE
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer: /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial: 0196BD4946448A9193FB5733CC227909D1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number: 09EE
Signing time: Sun 11 May 2025 03:00:18 +0000
Manifest this update: Sun 11 May 2025 03:00:18 +0000
Manifest next update: Mon 12 May 2025 03:00:18 +0000
Files and hashes: 1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: NNoIimiun7N8WKhfZawBd6DxzWxUOVIgUb+cFLW9pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:46:44:8a:91:93:fb:57:33:cc:22:79:09:d1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Validity
Not Before: May 11 03:00:18 2025 GMT
Not After : May 12 03:00:18 2025 GMT
Subject: CN=d0e68b14544bc25d8e636009531f525de9bed8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:b1:12:1a:21:a7:41:ba:df:9e:52:82:ec:
28:12:da:8c:7c:1d:64:d1:d1:a6:1d:46:40:a6:b9:
50:36:76:f0:04:6b:77:77:76:be:4f:91:ec:58:e2:
5d:bb:f9:b9:5b:df:a7:88:1a:cc:7c:5a:8a:9c:66:
3d:e2:87:79:9e:f8:e4:b6:cf:b6:c2:1f:4f:40:a0:
53:a0:11:52:0f:ee:00:25:9c:a7:e7:16:7e:68:6e:
97:c6:c9:ac:bb:66:97:1b:58:00:25:bf:2c:f9:27:
b5:d5:b4:1c:66:94:33:8a:8c:49:ac:c6:c4:89:2c:
ea:03:42:35:4f:97:af:55:cf:86:8d:b5:8f:17:3f:
11:98:05:c9:58:ec:5c:ac:11:85:5c:49:f8:73:e6:
44:9c:7e:69:ea:3e:ea:57:b4:9c:1b:33:71:51:fa:
bc:7e:c5:c0:7e:81:d7:7f:a0:9e:03:15:f9:3b:ba:
08:bc:6b:3f:76:60:1b:76:91:6e:07:ab:a3:73:6d:
68:c1:1a:95:2f:c5:a2:ac:e0:28:b9:ad:4f:fa:f7:
2e:1b:6a:71:42:cf:d0:01:39:76:23:d5:60:af:4b:
64:5f:8e:18:4d:f3:49:44:1d:cb:c9:ac:44:69:f8:
2b:05:57:1d:3e:c5:57:9b:91:33:38:f8:bf:91:c3:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:8B:14:54:4B:C2:5D:8E:63:60:09:53:1F:52:5D:E9:BE:D8:AE
X509v3 Authority Key Identifier:
keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:72:81:12:00:3e:ac:68:91:ef:23:9f:33:24:b9:0f:f8:7d:
44:05:32:b4:0a:51:82:2d:a5:df:14:a4:4d:cd:e9:0d:6a:89:
82:74:a8:28:61:33:f2:75:24:f6:b4:ae:f9:8a:c3:40:5a:5f:
c5:51:3d:cf:39:fb:86:b7:3b:53:41:ae:9f:4c:a2:df:90:9a:
e3:89:30:e0:2c:cd:5e:68:ee:92:47:ae:59:81:e1:01:94:4e:
7c:a9:76:18:2b:5e:a5:86:bf:b4:ec:4a:89:5c:bc:05:79:f9:
d5:de:40:22:b9:88:bc:d8:ea:54:04:f3:87:07:11:0a:42:88:
ef:91:a0:4f:2b:73:d5:4f:f8:c9:ef:98:cb:8d:3c:ae:89:1d:
d3:76:2b:2e:65:1b:cf:d9:ab:5e:26:f3:29:cc:6f:1e:97:27:
22:14:f9:44:62:b0:ca:2c:56:07:12:36:5f:11:69:77:3b:ca:
26:11:40:1c:b1:a9:96:b5:2a:eb:54:66:bc:cc:55:44:b9:f6:
fc:6b:3b:97:c7:6e:4c:62:4a:7d:55:2a:44:31:32:c1:18:68:
f2:b6:8b:02:fa:91:a7:a4:a7:61:b6:98:79:62:84:ee:6e:5a:
6f:3f:fe:dc:b1:51:d2:c6:f8:55:4e:45:b1:8a:cc:e5:e9:3a:
dc:b6:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:28:55 2025 by rpki-client