Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: 4pPYbXG0PXHkBy9U3fvHlWpRCjD21vdfa8NpaXXE7uc=
Subject key identifier: 85:2A:B1:70:9C:A7:69:2B:47:53:44:E2:97:9A:DB:56:B3:DC:06:A9
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 01967D8EEB56CAC38FE60DED5AD072246BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 18:00:40 +0000
Manifest this update: Mon 28 Apr 2025 18:00:40 +0000
Manifest next update: Tue 29 Apr 2025 18:00:40 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: 8p4JdZcFa1gIQXmv0XUeGM151+rIDxn+Hmi+MrbbOJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:eb:56:ca:c3:8f:e6:0d:ed:5a:d0:72:24:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Apr 28 18:00:40 2025 GMT
Not After : Apr 29 18:00:40 2025 GMT
Subject: CN=852ab1709ca7692b475344e2979adb56b3dc06a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:d3:22:8f:75:41:5a:54:d8:3b:5e:3c:48:
a9:59:59:8d:fc:d6:7e:91:8f:8e:69:45:0d:6f:33:
ed:e0:15:cb:20:7a:dc:e7:b1:3b:72:50:aa:96:a5:
84:81:f9:4b:f8:b3:3c:7c:3c:ab:13:22:30:04:1d:
60:c4:51:6a:24:48:47:fb:1e:34:b8:5c:6e:49:0c:
52:ce:79:a8:aa:60:ed:1e:46:76:fc:26:03:1c:ad:
08:48:ce:2d:1f:f5:f8:9b:8e:8b:5c:3b:35:be:29:
ae:82:c9:c8:68:dd:6b:2b:4b:75:c3:45:b6:55:2b:
0f:02:eb:16:18:f7:5d:0a:97:0c:1d:ac:46:09:16:
15:e9:96:4f:41:45:99:23:da:62:60:1e:88:47:c4:
9b:d3:a2:6d:b7:b3:d8:48:12:c5:33:fc:ce:84:6f:
ef:7e:69:81:d7:b0:65:6f:9d:be:be:01:e0:2c:e9:
7f:6a:32:52:d6:e5:cb:ab:c1:f6:b8:18:18:33:5a:
dc:e4:f2:86:6c:ba:50:b0:47:72:09:c4:2d:9c:d5:
7c:11:04:10:13:7e:ca:1b:0f:d4:2b:69:20:70:dd:
e4:a1:36:09:4b:1e:2d:c2:b9:07:4d:5a:6d:b6:63:
26:8b:bd:32:c9:cd:bf:24:1f:08:9f:31:51:0b:e9:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:B1:70:9C:A7:69:2B:47:53:44:E2:97:9A:DB:56:B3:DC:06:A9
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dc:3a:01:f1:0f:f4:a2:73:fc:98:23:f6:ec:3a:a2:a0:91:
4b:a4:d0:87:a3:6f:f5:25:19:f3:52:8f:91:67:18:df:57:4e:
63:e9:e3:21:ba:a4:09:fa:91:12:2e:4f:5c:e8:05:78:73:20:
76:e9:f6:a8:bc:72:ee:41:5a:46:8e:8c:17:e6:d7:9e:6a:85:
f6:d6:f7:00:46:0f:c7:78:ba:8e:91:f5:ea:07:4e:8f:32:f7:
f4:51:4c:0e:33:5a:a7:be:0e:f3:ae:0f:61:2c:39:65:ce:45:
97:8c:8f:7d:8c:fe:a6:24:bc:d7:30:66:1e:f9:36:09:e6:ba:
6e:1a:29:a5:9c:73:2e:45:78:e4:a5:78:3c:cb:52:41:63:06:
33:12:4e:f5:83:f7:1a:d1:0a:a8:bd:93:6d:6b:0b:f5:9b:b7:
b4:0b:6b:67:a2:12:3e:04:73:1e:55:e4:02:8e:6b:96:0d:24:
f2:18:4b:d5:f7:fb:1d:b2:d1:96:49:b7:f9:f9:80:0b:6a:c1:
72:4b:fd:cf:48:69:73:bb:a2:07:e2:3a:22:d9:9e:b9:6a:e3:
23:f9:f4:dc:9e:9b:62:d7:e9:a1:a1:66:7b:5b:82:f8:41:d9:
fc:6e:bb:7d:b3:76:e4:45:86:cd:38:76:de:4d:4a:f8:65:ae:
62:88:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:18 2025 by rpki-client