Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: ajwIgJTCHm3GGvNctw/eg5i7TJOPyyauFRIloBiARbI=
Subject key identifier: CB:B1:59:B6:00:D0:8C:2C:78:38:9E:5D:9C:FF:4E:50:1C:38:1E:72
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 019693A8A2937E82315588CF9CD718EFF206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 1524
Signing time: Sat 03 May 2025 01:00:24 +0000
Manifest this update: Sat 03 May 2025 01:00:24 +0000
Manifest next update: Sun 04 May 2025 01:00:24 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: KoYxYxW5DI0B0mtVnBeCzjv3Kf3iGNtUiz4k4u003AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:a8:a2:93:7e:82:31:55:88:cf:9c:d7:18:ef:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: May 3 01:00:24 2025 GMT
Not After : May 4 01:00:24 2025 GMT
Subject: CN=cbb159b600d08c2c78389e5d9cff4e501c381e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:1e:45:a8:b4:35:68:6b:7f:6e:d7:ef:54:
1c:29:76:c8:ef:db:ce:68:1a:06:2d:f7:60:d0:09:
d5:09:60:4b:4b:0e:b3:f2:49:09:95:8a:76:71:37:
ac:da:d4:c5:63:47:ea:bc:82:3f:a4:17:d4:c9:68:
97:fa:3f:81:40:ea:e4:94:45:05:41:9f:0b:ed:30:
8d:23:0d:01:8b:46:c9:8e:2e:02:79:a0:af:3a:99:
85:d9:0d:4a:61:6f:ea:f0:ef:36:81:64:a6:90:87:
b5:d7:4e:8f:69:74:20:31:62:7b:91:c6:0c:6a:91:
ca:37:d2:5b:22:50:e2:9d:b1:94:0a:87:e9:94:f3:
a8:21:1f:15:f9:20:0e:4d:4b:fa:56:1b:ab:32:35:
a6:ab:da:bc:4c:17:02:61:0d:28:18:90:16:6c:e2:
89:75:93:e3:0a:da:88:54:f3:4f:17:46:94:7d:14:
6d:b2:1b:62:62:84:ed:a0:39:52:b2:4a:af:27:41:
80:f7:c0:73:34:c2:fa:e1:8c:87:a7:f7:ca:12:11:
bd:26:58:21:c3:8d:c4:34:4c:4c:81:cb:f6:e3:f0:
03:82:b3:5f:80:a4:41:13:fd:eb:bf:da:f2:bc:28:
08:00:52:a9:97:dd:25:7e:3e:0a:a3:a4:44:92:d7:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:59:B6:00:D0:8C:2C:78:38:9E:5D:9C:FF:4E:50:1C:38:1E:72
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:0c:4c:42:3d:17:b8:f5:4d:48:08:e6:58:c9:48:3d:ca:
d2:b4:ee:5d:4a:33:f9:d1:ba:4e:0d:90:db:a0:3d:06:c9:b6:
4c:e8:85:b7:77:23:2e:38:a4:78:6f:d3:fd:af:1f:53:95:3b:
c7:6d:ae:fb:18:25:c8:55:5b:25:41:92:4b:df:b2:e7:24:a8:
6e:00:95:27:c8:cc:3f:b3:ea:01:d2:20:23:b4:20:07:d0:43:
5d:ec:8b:17:2b:e5:15:bf:bc:95:38:90:8b:2a:47:1a:4a:61:
3b:10:b8:63:5c:d3:3d:38:b1:9a:eb:d6:f8:73:fa:ed:17:4b:
19:cf:a2:0b:76:90:38:c9:5a:01:df:66:1e:e8:bb:e8:4e:c6:
46:d6:53:0c:a9:3d:43:08:a2:95:21:7f:3c:e9:a7:cc:f6:73:
55:2a:f4:9f:15:cb:d6:38:dc:d5:30:a9:56:7e:4a:ef:4b:9a:
7a:53:bb:f6:aa:4d:73:d4:08:24:ad:c2:95:b7:c6:39:2e:7f:
b9:0d:cf:6c:7d:d1:a7:14:9d:7c:9d:f6:f8:7c:f6:e5:a7:29:
e2:e1:76:e4:3c:35:14:4e:74:28:07:06:e0:5f:39:b0:82:0f:
c1:ad:06:1e:d6:24:05:ef:b1:18:a0:70:94:05:f0:ac:6f:d3:
3b:b8:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:01:31 2025 by rpki-client