Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: nQTzaOllpNLdEAfKGxfQa/n01XZAfdtzNF0hYkq0lII=
Subject key identifier: A6:69:31:25:0F:CF:8A:59:6F:FC:5C:6C:DC:2D:91:84:37:F2:C0:82
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0196C314A6AA51C1C76E09D23338ADDAD9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 1262
Signing time: Mon 12 May 2025 06:00:32 +0000
Manifest this update: Mon 12 May 2025 06:00:32 +0000
Manifest next update: Tue 13 May 2025 06:00:32 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: Lm3k3Y4+njfbTmdOoYoz5oCykpDZ0ZKBkKMQRbIeRjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:a6:aa:51:c1:c7:6e:09:d2:33:38:ad:da:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: May 12 06:00:32 2025 GMT
Not After : May 13 06:00:32 2025 GMT
Subject: CN=a66931250fcf8a596ffc5c6cdc2d918437f2c082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:06:a6:3a:44:12:6a:f5:20:dc:09:18:a8:
7b:11:fa:88:68:0d:34:af:24:3a:da:1a:de:5a:a5:
9b:82:18:71:de:0b:63:c4:53:40:a0:4f:e2:05:3a:
53:bb:46:ff:bd:58:e5:3a:c5:22:70:8d:47:d2:66:
15:8b:2f:1d:c1:60:d7:b8:0a:06:d0:e8:05:7d:f9:
80:e3:ce:3b:36:f4:42:9a:65:76:bf:41:3d:63:87:
f7:8d:0c:fa:56:83:d9:4a:8d:ae:45:cc:2b:1f:ae:
68:b8:83:3c:15:a5:00:d6:fb:3e:f9:0f:47:35:1d:
dd:59:d8:c6:2c:da:43:8e:7e:5b:9a:50:de:6c:f0:
62:01:19:d4:39:02:08:78:16:9d:3d:86:cd:e1:43:
7c:fd:63:51:bc:2e:8e:ee:a3:50:bf:24:2a:18:0b:
0f:44:67:c1:d4:8e:6b:e1:8f:23:ab:5a:8e:2b:85:
f1:4d:5b:9b:3b:b8:6b:7a:11:4d:0b:e5:17:40:67:
cd:79:cf:40:c0:53:6c:83:31:e2:33:f4:50:59:a3:
36:2c:db:b4:4d:63:01:0f:2b:72:5f:da:b5:28:1f:
a5:7e:b6:a4:dc:70:82:d2:c2:66:f8:ba:03:5e:ae:
d0:c6:79:91:25:72:6d:d2:1e:a9:11:1d:68:f5:bb:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:31:25:0F:CF:8A:59:6F:FC:5C:6C:DC:2D:91:84:37:F2:C0:82
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:41:c1:82:f8:f5:eb:72:bd:d1:c6:f7:1e:c1:d9:46:c5:
d3:8c:c6:de:c0:3a:b1:91:e3:42:84:a7:ce:0e:f4:85:b2:e1:
d7:d1:c1:30:94:cd:be:0c:c9:0a:bb:31:0d:86:28:e0:f2:aa:
3e:e1:34:ab:c8:cb:47:ef:e2:80:b2:bd:ea:ac:aa:f1:c1:dc:
f8:0a:78:d9:7d:6f:b2:2e:ba:13:a6:e6:16:a9:b0:4e:37:75:
7b:4a:9a:dd:e7:d7:76:98:28:d1:09:12:6b:3d:9c:54:1c:37:
99:23:43:b0:16:02:76:73:31:bf:e2:f6:12:d9:19:10:0d:79:
21:fd:51:74:4e:10:3f:d1:42:df:bf:4b:8b:c6:76:77:42:61:
fc:29:fd:5d:21:42:8f:ef:b4:19:0c:27:21:87:eb:ce:2a:74:
ae:87:07:33:39:b4:68:87:7c:3e:ce:33:c4:51:b6:51:0f:75:
34:42:a8:1b:bc:5d:b9:7e:5f:d4:57:a2:93:95:8e:b9:45:6b:
88:78:43:38:29:a9:e9:8e:22:d5:04:d0:18:a6:da:ef:60:23:
46:50:e3:d3:70:1c:82:f7:84:d2:2c:7b:d0:26:64:04:77:b4:
39:41:c9:1c:6d:99:74:3d:3c:89:56:9d:d8:f4:61:35:98:f3:
31:1a:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:31 2025 by rpki-client