Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: JMdrpTDQggSiaAI7G2rrxp2BXV2OugRJIooDgdz9qcc=
Subject key identifier: 93:8A:89:DA:ED:D3:C8:68:BE:CC:1B:CE:53:7A:51:00:C4:35:5C:7F
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0196C194042F9D4D862471075185FC9CB819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 05B1
Signing time: Sun 11 May 2025 23:00:25 +0000
Manifest this update: Sun 11 May 2025 23:00:25 +0000
Manifest next update: Mon 12 May 2025 23:00:25 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: BXtU9KLAykW2SHZMFf+pBMVSa2W0XTDieG2RHdxWfKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:04:2f:9d:4d:86:24:71:07:51:85:fc:9c:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: May 11 23:00:25 2025 GMT
Not After : May 12 23:00:25 2025 GMT
Subject: CN=938a89daedd3c868becc1bce537a5100c4355c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:45:c4:6e:d3:51:07:47:20:db:d9:fc:c0:
06:64:cc:61:35:47:ab:99:21:c9:17:1a:64:14:01:
25:27:f9:31:4b:be:f7:71:f8:72:21:92:ff:93:5a:
9f:b7:d5:39:c7:72:6f:1a:ea:31:39:3c:bd:f2:aa:
7f:b5:4c:c8:bf:b4:ef:19:8a:78:c7:ab:d4:c3:d3:
b0:17:89:9f:69:ab:a5:f2:eb:f9:0b:a8:b9:c7:16:
aa:77:b8:21:f3:de:a1:57:77:43:bc:79:95:e2:8c:
06:5c:7b:4a:93:1e:7b:67:3a:e0:e9:c3:50:39:f2:
c0:9e:e3:04:85:3c:a5:23:e8:4b:80:ed:53:ec:e5:
30:3e:24:0e:e3:ca:19:b7:8e:43:05:c1:63:78:ee:
0a:e3:4e:30:40:78:56:04:30:f0:d7:8d:92:8d:14:
20:74:c8:55:e5:d4:28:87:40:63:da:ce:2e:1d:11:
75:34:16:4f:f3:33:d3:e1:2b:f1:87:c7:f9:f4:e1:
fa:e4:16:f6:cb:00:fe:b7:11:f9:e7:55:66:d0:6a:
23:24:65:43:c2:e7:e5:99:f8:1e:ce:b4:65:ce:ca:
9b:7f:35:a9:f5:86:45:3f:b9:39:63:1d:d4:da:7b:
df:bc:cb:94:d8:a6:95:c4:77:7e:bd:1f:6c:3e:4d:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:89:DA:ED:D3:C8:68:BE:CC:1B:CE:53:7A:51:00:C4:35:5C:7F
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c5:e3:ec:6f:fd:4f:aa:05:64:29:2c:df:40:83:08:88:29:
12:76:0b:66:58:9a:7d:a4:41:c9:3f:47:f2:43:fd:aa:59:08:
97:cf:3d:6c:d8:76:7e:46:11:28:47:68:3b:b9:6c:13:26:34:
24:34:4d:75:a4:03:b8:d5:e4:90:8d:c5:5b:1f:f6:00:c9:d2:
25:1b:15:27:2a:aa:1c:e7:ee:c6:09:b8:b4:46:1d:52:a5:75:
94:73:64:28:de:94:89:72:4c:22:76:cd:22:35:6e:ef:b9:1f:
88:0d:cd:25:8b:c4:53:ad:b4:a4:9d:3d:24:2a:f5:f3:c5:9f:
83:c3:3b:8f:07:e7:ce:50:10:e1:80:a2:b9:1c:d1:bd:d3:13:
40:b7:0c:e6:61:18:b2:f2:1c:48:eb:62:fc:ed:df:bd:a4:69:
fb:30:31:c3:06:63:30:d0:d6:d4:b9:5e:85:bd:13:a0:36:f6:
3c:e1:03:96:ee:4b:6d:a6:8d:c8:05:e4:48:01:c0:72:f8:dd:
5e:ec:d8:d8:ac:f2:55:c3:89:bd:15:81:7b:38:c9:c6:01:78:
28:ab:ac:08:9b:7e:20:1a:b5:d4:aa:72:7e:35:db:9e:cc:8c:
36:0a:b4:d0:4d:93:e9:62:23:07:b7:89:eb:24:40:ad:2d:08:
fd:5f:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:06 2025 by rpki-client