Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: rGhA2Qyc0vu/aVGCdoMSlaOceWd/FAW7J3iEP8Ohr2E=
Subject key identifier: E3:A4:5B:8D:09:91:FC:29:D8:4F:5B:6F:63:5C:BB:7E:FE:9C:8D:10
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0196B8C8151967CA78CABC3C8EEC7D299110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 0E60
Signing time: Sat 10 May 2025 06:00:42 +0000
Manifest this update: Sat 10 May 2025 06:00:42 +0000
Manifest next update: Sun 11 May 2025 06:00:42 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: 5UicojezjRQviW5yzRkFrUeOVAreTwpKOiPgvJ3prlE=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:15:19:67:ca:78:ca:bc:3c:8e:ec:7d:29:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: May 10 06:00:42 2025 GMT
Not After : May 11 06:00:42 2025 GMT
Subject: CN=e3a45b8d0991fc29d84f5b6f635cbb7efe9c8d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:a9:f8:45:65:1a:21:a7:1c:c8:14:e4:8d:
45:ec:64:a1:da:43:03:30:25:7c:db:f9:cd:92:cb:
83:45:95:0b:b4:b0:36:be:28:94:2e:5d:07:b1:50:
cb:08:6d:76:ee:bc:9b:7e:84:c0:4a:c2:49:3e:53:
ea:7f:dd:b1:eb:4f:72:df:6f:f6:ea:57:8f:69:bb:
9a:89:0e:bf:8c:b1:27:6e:e2:57:90:3f:ec:17:42:
86:9c:68:30:54:0c:4c:a1:d5:ce:14:cb:e4:35:fe:
3f:9a:97:cf:cd:06:d8:62:70:84:a4:d0:d6:16:a7:
56:b5:0a:90:3b:5e:31:39:2b:58:6b:21:45:b2:34:
43:b3:57:24:67:15:87:36:e8:ed:55:45:22:e3:82:
17:81:70:bf:9a:d7:64:88:18:fe:e5:ac:4e:a4:da:
80:27:16:fc:13:e5:f6:7b:06:fb:b4:bb:53:5d:50:
84:60:de:e4:3f:01:cd:a9:80:2a:a8:c9:f9:47:f4:
36:35:fb:73:34:ae:36:4f:63:29:3e:c0:d8:0a:90:
5c:28:61:e4:c4:c4:4b:77:cd:03:d3:33:11:ae:44:
65:18:49:1b:94:73:8e:89:94:50:59:c1:83:b4:7c:
07:66:5e:4c:73:45:3c:98:62:14:9e:02:2a:1d:8a:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:5B:8D:09:91:FC:29:D8:4F:5B:6F:63:5C:BB:7E:FE:9C:8D:10
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:a1:65:87:2b:e9:9a:3d:38:f7:d9:71:da:b0:b7:a9:6c:
08:ff:37:2e:d9:58:9e:8d:72:b6:56:f9:00:65:f2:af:0c:c3:
81:23:bc:71:6d:79:38:9b:14:7d:1a:fb:79:e4:f2:e5:43:c6:
3b:4c:f8:bb:44:10:99:49:c4:97:77:43:01:89:24:14:92:2e:
ef:ef:29:bc:38:31:55:84:01:0b:e6:f8:7d:b7:c1:e9:4b:d4:
93:64:3e:b8:9a:f7:5a:19:ad:0c:8c:02:29:52:09:15:c6:2b:
9f:92:19:69:96:19:c1:53:23:cd:23:4d:30:87:0c:66:de:e6:
31:b5:29:01:a8:b5:c8:39:59:02:b1:d6:ec:82:c4:4a:e2:cd:
b0:c4:12:0b:01:3d:87:a8:a8:81:ae:4a:5b:99:94:ec:9a:be:
62:c8:d1:e6:06:63:04:aa:a6:da:ad:6d:2d:85:22:4b:6b:8e:
9c:10:02:79:3f:04:a7:41:a4:82:0a:de:ff:fc:8d:df:90:80:
3f:c9:45:bb:d0:b9:ed:d2:3e:97:cb:94:37:1b:94:48:4d:29:
92:4f:4a:53:f4:af:5f:c6:2e:31:c3:78:a7:3c:f4:2e:fd:2c:
91:ac:bb:69:db:1b:8c:54:e7:ed:82:bb:df:7b:46:7b:e6:ac:
29:c0:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:20:59 2025 by rpki-client