Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: PUQOYWZoy0RBLz/ppQJ2DUIa5C1WZDAgcjuhQRR3rxk=
Subject key identifier: F8:85:7D:37:C0:42:FB:84:78:22:48:26:05:1C:8C:29:65:21:0E:27
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0196C9174C20D7730902AE9FEA998EEC9811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 027C
Signing time: Tue 13 May 2025 10:01:09 +0000
Manifest this update: Tue 13 May 2025 10:01:09 +0000
Manifest next update: Wed 14 May 2025 10:01:09 +0000
Files and hashes: 1: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (hash: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: WdM63jxo3SBqvK4uVpBmgk/u1CuLFEnfxWtAxD/9R5I=)
3: yqEmqcbhmnb46ykBCYCzd7P1rRM.roa (hash: VNz3bBdEChpstgbAZJ0LtBM0pJErcl090waf56cLjb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:4c:20:d7:73:09:02:ae:9f:ea:99:8e:ec:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: May 13 10:01:09 2025 GMT
Not After : May 14 10:01:09 2025 GMT
Subject: CN=f8857d37c042fb8478224826051c8c2965210e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:28:d3:76:f6:34:97:b2:a7:73:68:bc:34:
49:e8:8e:f9:d0:e5:d1:e3:5b:8e:26:0a:08:ce:04:
0f:ef:13:b8:a0:08:d4:a3:70:61:28:68:c8:e0:7a:
ae:86:27:7f:7b:94:12:3f:33:bb:8b:8c:79:0c:8c:
35:87:bb:4b:73:ce:d1:2e:86:77:0c:a7:5f:38:7b:
9c:53:21:ec:6a:49:10:22:24:89:78:82:41:38:9b:
17:35:c2:9e:9c:b0:8f:b2:61:1b:f9:a4:d5:e2:35:
e8:36:bb:cf:00:50:da:e1:2a:ff:38:e0:f0:ad:0d:
3f:bf:8d:2d:36:1d:71:8b:6a:ef:8d:c3:ae:04:82:
a2:d9:74:47:e2:45:e0:cc:11:12:ed:ce:49:88:2d:
12:bb:06:84:a3:b3:5e:2f:50:21:27:e3:35:7e:fd:
61:9d:77:3e:08:fb:97:1d:27:58:e9:6e:51:a9:cf:
c6:5b:74:01:0d:d0:f8:7a:fa:cf:38:30:ec:f1:19:
49:bd:a9:79:32:34:25:c7:03:7e:b7:9a:42:24:ba:
66:e5:b1:3e:84:87:0a:78:2e:8b:b9:3d:be:e7:bf:
1f:aa:86:aa:f9:98:b0:7d:4f:58:28:57:f4:cf:bf:
3e:e4:2c:9c:38:ba:ea:99:1b:81:7b:02:41:ff:af:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:7D:37:C0:42:FB:84:78:22:48:26:05:1C:8C:29:65:21:0E:27
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:3a:02:b9:04:89:1d:4f:4c:24:20:a7:b5:ae:af:c2:d5:
c7:bc:34:ee:75:d8:09:73:77:9f:bb:49:98:65:26:7a:5d:4b:
69:30:02:f3:03:81:ce:3d:72:82:d9:c8:cf:8b:76:3e:e4:8c:
80:5d:b8:95:e6:63:4b:3b:d0:9e:d8:a5:d7:0e:3b:53:e6:51:
51:81:f6:c4:25:4f:a0:0e:ff:b5:48:9d:c6:7a:3d:d3:cd:c4:
23:78:4f:45:dd:8a:68:de:bb:46:6a:4f:f6:05:02:eb:85:0b:
9b:4e:c9:a0:db:23:51:9f:f3:64:59:75:db:31:49:ba:2f:1a:
19:e5:c3:fc:96:19:7b:0f:d1:72:60:a1:70:a0:68:34:48:58:
cb:10:a8:b1:dd:b0:dd:3f:3d:c0:56:1a:bb:d7:dd:2e:a2:27:
bd:f4:a9:53:02:f4:a4:62:bc:4a:2c:36:70:44:e5:35:a0:2a:
f0:5f:67:d2:21:52:0e:dd:49:9e:1d:e4:2a:68:26:92:ee:2e:
96:97:ee:22:63:71:fe:3f:43:e2:ea:cf:cf:11:ff:31:b3:dd:
a7:26:08:bc:e5:6a:71:87:57:42:e3:8c:f2:7a:47:88:e5:ff:
e4:a6:d7:b4:fc:02:88:f4:8c:53:98:8a:6d:23:3b:5f:2f:90:
90:64:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:03:59 2025 by rpki-client