Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: FmZrd6AH02WX4/u6Zfz1UyVmD1xSYn9E1gHRKa+rDv0=
Subject key identifier: 69:26:3B:34:43:A9:0C:14:34:CE:9D:6A:BE:52:75:B3:FB:90:9F:58
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 0196ABB1147A656B4429F8317AB167321770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 17:00:31 +0000
Manifest this update: Wed 07 May 2025 17:00:31 +0000
Manifest next update: Thu 08 May 2025 17:00:31 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: Lx93TGF1acbJ4/UJ4XS6kDnafkSRJUsXuwzyxcMu2NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:14:7a:65:6b:44:29:f8:31:7a:b1:67:32:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: May 7 17:00:31 2025 GMT
Not After : May 8 17:00:31 2025 GMT
Subject: CN=69263b3443a90c1434ce9d6abe5275b3fb909f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:58:6a:de:c7:f0:13:07:2b:89:26:03:b2:
9a:c3:13:5e:2b:61:85:f9:f3:ee:d3:3d:9f:c1:79:
45:55:bd:b4:99:3d:0c:f1:66:4c:f4:6e:6b:7b:b6:
3b:79:aa:d1:99:e3:2f:32:66:0c:ce:b2:85:c4:a7:
67:d4:81:3e:7a:32:85:e1:19:97:89:eb:00:fc:86:
04:6e:96:91:71:8c:8e:48:c0:9c:b8:2f:96:04:61:
10:6c:3c:0b:90:e3:74:a0:f9:8d:6b:19:50:b1:dd:
70:05:15:47:c1:ca:56:82:c1:b2:3f:bb:fe:90:c9:
2e:05:67:57:db:aa:22:73:89:3e:b9:cd:82:a2:17:
ab:4e:c8:64:48:ec:17:13:7f:f3:91:7f:1d:75:61:
2f:52:df:5b:b8:e0:41:86:32:f3:51:b4:50:4e:f5:
59:c7:11:a7:0a:e4:f4:a3:87:92:5e:a2:75:ee:67:
79:ee:46:de:ed:f0:22:6a:64:b8:bb:f0:49:e0:6e:
06:0d:7c:c8:f9:50:d6:e6:67:6c:6e:16:5c:aa:dc:
17:5b:93:2d:57:c2:8d:c8:3a:c1:5f:49:59:8e:2a:
a6:1b:c1:d4:5d:68:28:bd:61:f1:3e:f7:d9:9c:ac:
13:c6:9f:45:19:b1:36:70:2a:44:0c:3c:1f:b5:95:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:3B:34:43:A9:0C:14:34:CE:9D:6A:BE:52:75:B3:FB:90:9F:58
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:83:bd:70:4e:1c:ad:e3:b2:73:1c:e5:53:02:ba:16:39:
25:3c:44:ff:f4:f0:e9:03:50:07:1d:88:8c:ae:56:f6:6d:53:
90:3c:72:95:40:d7:f9:28:8a:49:af:21:e4:4c:1d:92:64:60:
4f:eb:f1:38:27:7d:53:14:a4:5e:ae:cd:6d:96:bd:f6:59:2c:
ca:b9:3a:d7:75:06:1a:dd:97:a7:cb:ee:99:50:fc:a0:c3:1b:
72:c3:5e:1b:b9:b5:51:df:e3:42:c4:b4:bf:23:68:ff:8c:05:
e6:6a:86:24:92:60:37:a5:d6:b0:ed:20:ed:d0:de:e1:1c:1b:
92:48:b1:17:5f:7b:99:8e:63:38:1e:ce:24:da:9b:fe:93:c5:
7a:52:c1:24:ed:ce:d3:93:c7:0b:a5:ce:4a:b6:28:7e:9e:d2:
b1:86:1f:77:47:58:59:4f:0c:f2:62:7e:5a:14:80:8d:3d:6f:
7c:2c:a9:08:aa:f9:fa:cf:57:10:f8:81:38:b7:65:87:23:2e:
e1:4b:00:ef:49:05:7f:c3:d3:83:69:0c:66:85:36:05:f6:77:
bf:65:47:4c:fa:9d:d6:a9:65:d8:fe:32:fa:6f:67:4b:a7:b4:
c4:2c:82:c9:6a:5b:7f:88:a1:49:6a:e1:67:a9:52:ac:be:03:
1b:73:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:43:19 2025 by rpki-client