Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: CO5egNwq2fIrp7SvfjAlmNxZCubAyyDRaBZpQrPwqu4=
Subject key identifier: 4F:3D:31:6F:9B:9A:DE:11:55:08:6D:15:C2:E1:CB:E7:5B:40:44:B7
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019674F9CE7BBE2CEB9570C3B04E9B0F901D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 01C6
Signing time: Sun 27 Apr 2025 02:00:50 +0000
Manifest this update: Sun 27 Apr 2025 02:00:50 +0000
Manifest next update: Mon 28 Apr 2025 02:00:50 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: PC/588239zMzNl6z045asEhmqZ6raIPBQe0g5fY/pic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ce:7b:be:2c:eb:95:70:c3:b0:4e:9b:0f:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Apr 27 02:00:50 2025 GMT
Not After : Apr 28 02:00:50 2025 GMT
Subject: CN=4f3d316f9b9ade1155086d15c2e1cbe75b4044b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:a0:95:32:39:07:e0:10:01:55:8f:f6:56:
6f:e4:4f:7e:ff:6e:5e:c2:b7:3c:87:cd:a8:db:3f:
aa:d7:1f:53:b7:ab:43:6c:4e:ab:66:ed:f5:a3:80:
aa:52:7b:50:33:95:eb:43:3f:d0:5d:2e:04:7c:b0:
f1:dc:5b:db:ca:17:81:6c:2c:92:f9:1c:aa:4a:a7:
39:28:73:ec:bd:77:42:0f:af:ce:d8:7c:d7:03:d4:
38:b2:a4:6f:ae:ac:95:d2:05:4c:65:63:0b:c2:9a:
a3:20:fc:a0:a8:14:d7:38:de:02:3d:1e:ef:92:ae:
4b:a9:dd:b0:5e:92:89:81:15:37:91:6b:ef:8a:33:
27:14:e2:2c:8a:d5:18:19:4d:3c:a6:1f:97:3c:af:
e4:76:1f:4a:fb:c0:b9:6d:9d:bd:3f:76:88:95:99:
1c:e8:96:68:5c:27:17:c3:17:8b:0d:a5:32:7c:d0:
bb:0e:9b:b3:6e:d7:36:c3:d3:a2:44:4c:2d:8b:e0:
9a:d5:06:83:2a:7a:02:fd:bd:85:2d:c2:9f:6f:4b:
ba:a4:d8:19:ea:a7:a7:ad:ca:b1:96:83:19:d2:b1:
4f:8c:c1:35:4d:27:b5:5c:97:af:d0:ca:04:21:18:
53:bb:8a:cf:09:38:a8:13:00:a7:5f:67:ef:5e:2d:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:31:6F:9B:9A:DE:11:55:08:6D:15:C2:E1:CB:E7:5B:40:44:B7
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:39:e0:52:6b:de:95:cc:b0:d5:cb:6c:51:69:2e:d9:4b:30:
cc:bc:f8:cb:47:ef:d4:41:6f:b9:0c:c3:60:f3:38:fb:9d:67:
44:da:b2:8d:a2:6f:3e:2f:8c:33:b8:b2:ba:38:5b:e0:87:ea:
ab:6f:ea:91:d8:10:62:f2:07:41:d6:aa:06:4e:3f:98:62:0c:
5d:63:82:a6:14:72:b9:33:21:02:70:be:50:14:71:51:14:8a:
88:8e:d9:c3:cb:48:6a:ee:ca:44:80:03:40:14:5b:d0:d2:09:
e3:22:17:e7:fe:a3:10:a5:8d:cb:95:83:70:2c:29:df:f3:79:
06:10:73:6b:f9:14:2d:0d:fc:34:96:67:16:14:9f:09:15:14:
4b:79:02:11:18:c5:44:a6:a1:48:49:39:9d:f1:2b:b4:1e:54:
0c:c2:25:60:29:3f:dc:22:bd:db:ec:8e:47:3c:ff:8f:42:e4:
ad:fe:bb:00:36:51:1f:66:52:da:6b:22:23:a6:d4:15:ca:93:
f2:11:dc:97:4e:60:dc:e7:f3:80:71:c6:12:01:4d:14:59:76:
4f:d2:84:8b:fc:72:6a:43:25:d8:a3:73:0e:70:3b:48:4c:73:
d6:de:00:e5:2e:51:e9:db:eb:c1:20:6d:a7:3a:bf:d1:4d:75:
78:4e:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client