Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: 1KDOV4EhZBNsN4ofkqYX9mqU+a8KRLSu3pBf7t71phY=
Subject key identifier: 2F:9B:B8:9E:03:09:9C:6B:22:9F:AA:10:43:B9:79:AB:9D:EF:7C:D0
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 0196AEE9222B1A581A3530A1588066FFD2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 08:00:36 +0000
Manifest this update: Thu 08 May 2025 08:00:36 +0000
Manifest next update: Fri 09 May 2025 08:00:36 +0000
Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
2: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
3: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: GVTtnwSnaDWQ9hqO2fXMBmCONKXjmt5e+ZMrryJJLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:22:2b:1a:58:1a:35:30:a1:58:80:66:ff:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: May 8 08:00:36 2025 GMT
Not After : May 9 08:00:36 2025 GMT
Subject: CN=2f9bb89e03099c6b229faa1043b979ab9def7cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:0c:a1:a0:26:8b:14:71:a1:a8:8a:9e:3c:
ff:3a:91:29:66:83:c7:ee:b5:4e:0e:7c:d1:91:09:
90:09:1c:e3:f2:82:89:e3:a8:6a:09:7c:f1:cb:c7:
be:14:68:b7:21:8c:9e:db:f6:49:b8:95:5a:c9:ca:
51:14:dd:0f:f6:08:40:86:9e:d6:0c:32:a7:64:55:
28:79:02:09:0f:47:8d:5c:99:2e:74:fa:8a:52:b6:
50:36:d3:31:f6:e7:f4:19:3e:e5:f5:63:cc:bc:ff:
5a:66:c1:7e:a3:39:2f:63:8d:a8:0b:62:2d:dd:9c:
a0:ca:3d:03:b9:ce:a8:5c:94:bc:9c:36:c0:9b:4c:
8c:0f:64:80:c5:dd:b6:85:4c:81:29:55:c8:2f:64:
69:46:2a:33:4c:ad:97:dd:5b:5b:e8:ac:e8:91:4f:
f1:a7:d6:cd:39:ec:0e:1a:f0:41:c2:c2:7c:49:b4:
e7:5e:f3:38:e0:c7:fe:02:a8:70:26:54:9a:b7:3e:
aa:2a:85:02:f4:37:cf:2c:ad:7b:58:9b:ff:43:2d:
f9:f8:1e:cd:9c:c7:eb:73:fd:21:49:ad:e0:04:a3:
29:22:85:82:14:47:e6:2b:c0:e1:7d:9a:3f:e9:91:
1a:e1:07:2f:23:03:fc:d0:86:1c:b3:5c:41:4c:dc:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:B8:9E:03:09:9C:6B:22:9F:AA:10:43:B9:79:AB:9D:EF:7C:D0
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a3:1e:0c:7d:06:90:03:56:8d:af:0a:9d:cb:a7:42:3f:02:
35:58:19:c0:69:b4:d1:4b:7e:5f:7d:99:cb:59:1f:b8:cf:84:
19:a5:fc:39:95:06:07:2c:e3:12:06:e5:73:13:16:fe:05:74:
e8:63:41:00:37:3a:10:2c:80:34:3a:26:13:28:1d:10:53:7e:
10:1a:08:5f:ed:fb:d0:ed:44:f0:2b:3f:0d:0a:2a:b8:5b:f8:
b4:68:dc:81:bf:ac:fc:c7:63:27:ac:44:b7:b5:4e:ba:c3:86:
26:b1:1f:98:b4:7e:11:8b:9a:35:27:65:40:0a:53:b3:f0:26:
a0:1e:e8:1b:b8:9e:9d:68:dc:f1:c4:22:1f:8b:17:6a:e6:c4:
01:c7:1a:7d:c3:31:7f:10:fd:66:de:b7:a1:bf:d8:35:2c:76:
93:ee:ef:27:8b:43:7b:5a:cf:43:5e:9f:16:b0:86:f9:5c:93:
3c:cd:10:a3:b0:9d:6f:19:df:5a:aa:ce:e0:c9:ff:e0:79:88:
2e:6e:2d:18:65:27:39:44:6d:66:2e:83:70:c1:03:af:83:23:
9a:85:3e:34:07:a4:b5:be:6e:6a:ee:e0:ab:56:b8:0e:80:2a:
12:c8:de:42:85:25:f1:be:2b:f4:15:b0:75:4f:da:18:51:92:
d3:58:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:26 2025 by rpki-client