Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: Evrp51uxdcvhZYirWwx94jxq2Nm31MFCJPlBBIs5mKw=
Subject key identifier: 77:29:37:08:36:3E:3A:A4:4B:02:39:F0:16:80:83:DA:95:42:38:D8
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 01968A379BF8D94AF208959C46CCC887276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 133A
Signing time: Thu 01 May 2025 05:00:22 +0000
Manifest this update: Thu 01 May 2025 05:00:22 +0000
Manifest next update: Fri 02 May 2025 05:00:22 +0000
Files and hashes: 1: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (hash: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: RMdXH556sujfwlqsfVEIIN0cnCZv9oycfjjlMuG544A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:9b:f8:d9:4a:f2:08:95:9c:46:cc:c8:87:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: May 1 05:00:22 2025 GMT
Not After : May 2 05:00:22 2025 GMT
Subject: CN=77293708363e3aa44b0239f0168083da954238d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:80:58:a9:08:6d:57:70:36:c7:2d:09:23:
3f:59:47:8f:4f:9b:2d:77:3f:d0:e7:1a:36:43:83:
44:32:40:15:92:3a:5e:b6:93:43:17:32:50:60:59:
a4:89:06:d7:37:eb:32:6d:7b:27:fb:18:57:e7:5b:
e7:09:97:4d:75:4e:46:b2:f7:e5:18:39:7c:4c:10:
e5:5d:ce:36:3f:bf:89:94:08:e3:b2:1e:1b:10:a4:
e1:dd:b3:8d:0d:40:56:08:cf:83:47:2f:94:f9:cb:
71:dd:c1:50:d8:1b:b1:d3:df:27:c3:3d:7f:b1:18:
5f:67:b4:8b:1a:4c:bf:03:c5:b6:9c:63:d8:aa:7b:
dd:cb:4e:dd:af:65:e1:28:2b:c9:20:f1:7f:92:5f:
6e:47:78:ae:30:6f:f3:1e:5e:09:e6:52:1b:7c:89:
81:18:47:b8:ee:97:79:5b:4b:eb:33:e8:4a:58:a4:
81:e7:01:df:58:fb:00:7b:86:3a:00:72:ef:53:a6:
ad:8a:40:de:69:7b:32:6b:67:f4:1b:42:83:d8:e4:
87:2c:1b:50:8c:d3:9b:bf:24:b4:f0:b3:6b:01:68:
63:73:15:27:78:24:d2:7c:c6:c4:b7:d7:60:1b:93:
78:b0:7a:62:a9:91:96:c9:7d:58:a3:e1:62:80:74:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:37:08:36:3E:3A:A4:4B:02:39:F0:16:80:83:DA:95:42:38:D8
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d5:22:92:d0:9a:39:83:21:2b:33:6f:88:a4:3e:b7:ac:63:
0f:22:21:85:bd:0d:6a:d1:d2:17:48:e5:d9:6e:7b:ca:e3:35:
85:ef:83:cb:d7:65:e2:52:5b:21:e4:de:92:b2:55:60:63:c6:
a2:47:9d:b3:13:8c:1f:37:9f:0c:5d:60:e1:3d:c3:f6:0a:27:
f6:9e:61:f3:b8:fa:e2:a5:28:0e:dc:82:30:94:69:36:d9:a4:
7a:4c:29:76:cd:7d:e0:86:47:67:c7:ec:d6:10:69:10:9f:ec:
f5:8c:b2:1b:d2:be:06:c2:3e:d8:c0:29:ee:36:70:28:ea:22:
1e:c1:a0:7e:37:d2:23:2f:20:eb:54:d0:2c:84:b8:f2:a3:77:
80:4a:1e:7c:6d:fb:1f:b1:7e:89:48:d6:c8:ee:99:ee:82:df:
4e:ef:25:f6:b9:4d:04:07:16:bc:b0:70:ed:58:8d:f5:63:af:
98:b2:94:55:bc:b9:f6:ea:4c:e9:1d:fb:86:68:4f:ec:b5:b3:
bb:c9:e5:d1:ba:0a:df:28:98:c1:2a:fc:52:dd:ad:23:03:14:
83:4f:cf:12:3f:0d:72:86:16:70:f2:db:de:41:05:0a:70:d2:
77:2c:de:7f:5c:57:bd:f1:cf:df:b5:d6:ae:cc:28:9b:f7:ce:
fc:90:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:41:45 2025 by rpki-client