Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: 9RSj2UafL/tY6p8/n35JVD/G46T69CLSoWyEpq989Cs=
Subject key identifier: B2:17:B9:6E:D4:36:84:BF:22:BF:25:FF:E3:8D:25:C2:2E:DC:F5:27
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 01967756022187102BE4EFDB4F48315D3168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:47 +0000
Manifest this update: Sun 27 Apr 2025 13:00:47 +0000
Manifest next update: Mon 28 Apr 2025 13:00:47 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: 2E44G/ven2TAx4jns7aEWq+dCB7eczYt6gfjmDoh/zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:02:21:87:10:2b:e4:ef:db:4f:48:31:5d:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Apr 27 13:00:47 2025 GMT
Not After : Apr 28 13:00:47 2025 GMT
Subject: CN=b217b96ed43684bf22bf25ffe38d25c22edcf527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:67:06:74:57:1c:e0:eb:f6:b3:e5:e7:97:
cf:74:6a:61:8e:30:f0:19:44:7a:50:86:c5:63:2a:
b1:3b:92:c7:e9:6b:69:47:92:19:f4:0a:85:22:cf:
f3:d7:74:6d:4f:80:56:9f:df:37:f9:a0:db:d2:90:
52:73:c5:f7:53:41:8e:f8:46:ee:8b:75:f8:78:7d:
6c:58:9b:52:18:f5:67:46:bc:0e:d0:1e:df:05:2c:
63:e2:a0:2e:78:df:f5:eb:e9:05:d9:6a:11:e4:27:
a7:3c:8c:11:fc:b6:f2:76:d6:f5:13:d5:d8:99:3d:
14:1c:0a:07:68:f9:6a:25:22:20:4a:e1:32:d9:2b:
1c:eb:23:46:9a:58:08:78:15:ed:c0:c5:ce:fb:0d:
ae:f0:02:23:35:11:94:0a:49:1a:bf:51:13:7a:51:
2b:63:49:a2:06:6e:f9:b5:25:c2:8f:73:dc:de:3a:
9d:f0:97:2a:5c:b7:5a:9e:c8:1d:6f:d6:36:1b:2e:
2d:16:1b:8e:d6:20:fa:1d:44:6e:d5:49:a7:95:e2:
ee:aa:ae:e7:65:ae:9b:dd:89:76:ff:97:da:cc:d7:
80:d8:d8:89:9c:a7:df:20:1a:d1:2a:f2:b1:34:e4:
0a:e1:f4:5d:b3:17:a1:39:9d:e3:1f:22:59:47:84:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:B9:6E:D4:36:84:BF:22:BF:25:FF:E3:8D:25:C2:2E:DC:F5:27
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:47:e2:ab:77:92:b0:7a:ff:4d:ac:c7:7d:b4:67:ed:56:
59:f2:73:ef:ed:26:da:2f:c9:65:1f:0e:c7:39:14:68:4c:8e:
17:40:17:fa:01:b9:11:9b:78:e7:70:84:20:53:fd:94:62:6a:
b6:ce:59:5e:28:af:75:14:b1:8b:f9:9d:56:3f:93:0e:3a:8b:
13:6e:6c:e5:d6:1d:ff:14:b7:48:0c:96:a7:20:98:af:75:fd:
1a:e5:7e:3c:9d:0f:5f:b6:ef:c9:5b:04:78:20:f9:66:c4:8d:
50:9a:30:eb:b4:48:1f:18:1b:dd:10:3a:98:15:72:4a:d4:fc:
5c:26:19:71:6e:40:03:2d:a0:48:12:c6:5e:ac:e9:eb:3b:8b:
a1:b0:7a:92:ab:f5:b8:51:bc:5b:8e:56:b6:e1:bb:bb:76:df:
1b:e9:be:f9:84:76:dc:0a:9e:ad:43:0b:c6:d4:3f:e7:cd:41:
71:04:5a:39:8d:ce:df:28:01:69:cf:43:6e:63:e7:13:84:04:
ec:f3:27:e1:bf:68:4a:4b:68:de:79:f2:61:f1:8d:16:38:71:
12:5e:f2:84:b6:cd:a1:fa:47:79:9c:cf:3f:f3:e7:b4:7e:44:
97:ec:71:15:4e:5a:16:65:e0:29:fb:d9:3f:f9:7a:2d:db:5d:
36:09:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:53 2025 by rpki-client