Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: aFlYi36ugY4Qz/CKQ8xbVQ+3F3E7fJlGL6zn11leLdA=
Subject key identifier: 9C:14:3D:83:A5:0E:6D:35:70:B0:B7:00:F0:E6:D0:CF:3E:96:79:C3
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01968A0082D8BAF56B2FA1E352EB553DEDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0EED
Signing time: Thu 01 May 2025 04:00:11 +0000
Manifest this update: Thu 01 May 2025 04:00:11 +0000
Manifest next update: Fri 02 May 2025 04:00:11 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: VtzSDOhJRaGutt27pXOM6f4cZwsKGefaHz8z6ud//sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:82:d8:ba:f5:6b:2f:a1:e3:52:eb:55:3d:ed:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: May 1 04:00:11 2025 GMT
Not After : May 2 04:00:11 2025 GMT
Subject: CN=9c143d83a50e6d3570b0b700f0e6d0cf3e9679c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:47:70:30:a0:5e:f6:44:7e:ab:02:0a:2f:e8:
37:88:2f:bb:c7:88:d7:4e:0a:a8:30:67:49:de:d6:
6f:19:a5:5f:16:75:14:14:68:3f:02:e4:fe:60:16:
d7:04:47:de:ff:5d:e9:ca:a3:65:db:df:ff:b8:70:
4e:fb:3f:0e:17:cc:38:6a:3d:36:d9:74:52:e9:97:
79:b7:21:e4:15:29:e2:65:b5:f3:f4:cc:b1:dc:53:
79:3e:56:b3:02:50:a2:82:0a:49:f4:94:26:7a:8b:
d5:2b:48:a9:0c:3c:4c:62:74:22:2e:d9:bc:6e:a0:
79:03:30:1b:df:92:55:49:a1:d7:63:4e:27:7b:bc:
35:4f:15:5b:73:33:f9:ff:5c:9c:ef:e4:c0:ea:c3:
e2:25:63:5f:fe:39:11:6b:5d:b9:70:d9:8a:5b:c9:
f7:49:87:5d:3d:19:b0:5a:53:67:15:b9:96:32:19:
db:56:7b:5c:c8:12:8d:4d:2e:36:42:10:fc:ec:1a:
89:c8:3e:93:44:a1:9f:b2:c9:1c:c0:9e:ae:46:be:
e4:e0:d8:43:c4:5f:29:3f:5b:5b:57:e9:83:f1:5b:
a6:16:e6:7e:3e:56:84:22:46:d6:4d:80:2f:ac:98:
0d:c7:89:dd:1b:53:f4:11:e9:b1:e6:74:31:25:57:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:14:3D:83:A5:0E:6D:35:70:B0:B7:00:F0:E6:D0:CF:3E:96:79:C3
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fa:09:fc:cc:95:4e:9b:dc:1d:ba:6e:76:e2:3c:79:1c:49:
6a:15:b3:aa:44:90:71:85:21:19:c4:d2:07:53:44:89:63:c7:
65:49:47:0c:f0:59:7a:85:f2:e2:3b:0d:e2:c8:c6:26:32:91:
5e:53:da:0a:e4:97:e1:79:ac:cc:1c:e2:a5:76:10:84:38:d5:
39:dc:a5:e6:ff:a9:d4:f8:af:bc:d9:1f:89:3b:5e:44:89:89:
5d:71:51:f1:69:3d:14:43:01:fd:89:89:01:ae:e5:9e:11:b5:
2f:ae:f8:32:ae:33:1a:b6:cb:76:a0:7a:5d:df:15:74:27:83:
a4:4b:21:78:f6:5d:ee:b9:64:55:9b:9e:9f:47:94:21:5e:59:
08:2d:17:88:ed:bc:c2:f6:85:4f:90:90:47:ec:b8:75:3e:e5:
e7:f7:b9:03:e6:93:d5:e0:57:a5:5d:fc:b1:31:33:6d:16:2a:
76:00:03:40:ee:27:4c:59:ec:31:5e:7c:60:8f:e3:44:48:a5:
52:60:23:cd:f0:42:28:f7:d2:7e:52:96:9a:68:a7:eb:ff:07:
88:ea:51:a3:d7:94:a3:c0:b8:69:7e:3e:aa:f5:8a:29:c1:ed:
cd:cf:7a:51:15:9e:30:94:be:51:9d:90:9b:fe:f8:82:f3:65:
58:d2:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:16 2025 by rpki-client