Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: a9umJIpNc+I1Peto9MnFnpCjlQmptzKdI18Jys+QHYk=
Subject key identifier: E7:1A:E2:87:B4:0E:A6:5C:75:52:19:3E:A1:EF:F3:37:5F:62:78:E3
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0196BFDCB94481DB7AF2B0878B4553C8BECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0882
Signing time: Sun 11 May 2025 15:00:35 +0000
Manifest this update: Sun 11 May 2025 15:00:35 +0000
Manifest next update: Mon 12 May 2025 15:00:35 +0000
Files and hashes: 1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: o/99YEe5Fk1uh4jrVIFUnRahlDOYOMqhUPvOriCwBok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:b9:44:81:db:7a:f2:b0:87:8b:45:53:c8:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: May 11 15:00:35 2025 GMT
Not After : May 12 15:00:35 2025 GMT
Subject: CN=e71ae287b40ea65c7552193ea1eff3375f6278e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:0a:d4:bc:df:68:6c:87:94:e4:86:b5:a8:
f3:75:1c:eb:9c:99:62:0e:26:de:b0:5b:9f:4d:c9:
a1:57:a6:5f:56:23:78:82:07:fd:88:dc:63:d8:7e:
66:4e:a0:62:c3:c4:92:58:af:c2:d1:06:10:ed:50:
e2:b4:79:31:26:55:ef:98:1e:6d:9b:28:a6:91:70:
78:39:8f:60:5e:95:3a:90:97:88:17:5a:61:9c:4e:
45:f7:7c:c0:01:f6:ee:96:53:f6:5e:0c:19:a0:84:
75:da:50:ee:58:cb:5e:e4:80:a2:4c:ca:fd:8b:1f:
a0:05:3d:d4:68:5c:75:99:4d:5f:96:da:64:3a:24:
f9:6d:31:fb:91:4f:5c:78:69:b0:23:10:22:a1:8c:
18:bc:f6:5c:1c:28:65:75:d0:82:17:21:d7:ab:bb:
09:a4:1c:81:60:4a:2e:45:d3:eb:bd:e8:81:46:71:
3c:22:95:36:08:1d:db:4b:bb:ab:f0:ab:c9:e9:02:
f0:eb:0c:e6:f6:74:be:89:96:86:fb:94:75:03:19:
ea:9d:45:13:a8:29:db:45:9d:40:2d:02:16:da:e1:
d2:44:0c:e4:62:1f:8b:49:f9:a5:8a:3d:a5:52:fa:
81:2f:cd:bd:82:eb:84:ef:43:d1:61:34:3d:a7:11:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:E2:87:B4:0E:A6:5C:75:52:19:3E:A1:EF:F3:37:5F:62:78:E3
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4f:22:b3:de:99:9a:30:16:68:9e:05:29:5a:ee:47:b5:af:
f1:e2:3c:b2:a5:8d:c4:06:86:0a:7e:01:bb:2f:8d:a7:4a:3e:
d9:0e:35:4b:cd:4b:66:ca:01:15:e2:7a:24:42:a8:04:2a:75:
2f:14:66:50:04:fe:12:8c:e2:8a:44:b8:da:89:a8:70:9a:03:
0c:43:ee:95:e2:20:da:b2:87:0c:d3:84:d9:5d:53:f3:7d:86:
40:03:56:e2:0e:d5:68:d6:d7:37:d3:3b:bf:0d:73:6b:5e:14:
72:50:db:60:c3:32:d8:b2:9f:12:d2:82:45:08:65:7a:7a:e2:
71:0f:60:d1:4a:73:b9:3a:58:4a:2d:77:d9:10:d2:ca:89:8f:
ab:d0:59:99:63:20:a0:ea:ef:7e:1a:0d:be:96:35:eb:23:15:
32:dc:f7:c1:a6:1c:25:99:95:10:b3:41:10:42:fd:15:dd:58:
6a:71:c5:0c:93:84:07:90:e0:a7:7b:f1:b4:31:f6:b3:a9:a4:
58:a1:ad:fd:ec:a8:bb:9e:1b:ba:b9:3f:a0:c1:16:11:5f:64:
e6:4e:a7:24:7f:e9:7d:9e:26:7b:54:de:84:81:0d:9c:d3:74:
6b:9e:47:01:f7:0a:ae:83:43:5d:44:cd:c0:50:7b:b4:98:eb:
c7:2c:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:15:31 2025 by rpki-client