Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: bLlGs7Kw0623QYhGmDjDOi3CFYObrrXHL6zdRUEGtZY=
Subject key identifier: D5:AC:8C:94:76:D4:3C:45:21:43:F3:CF:17:DC:F5:2A:91:F8:31:D6
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019684A361A9A08416D765B07D9354FFEB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 03:00:21 +0000
Manifest this update: Wed 30 Apr 2025 03:00:21 +0000
Manifest next update: Thu 01 May 2025 03:00:21 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: WXfbuiAetKx9U0ssj4A8pGbuCJlGGIxTPQIvZVTsB9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:61:a9:a0:84:16:d7:65:b0:7d:93:54:ff:eb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Apr 30 03:00:21 2025 GMT
Not After : May 1 03:00:21 2025 GMT
Subject: CN=d5ac8c9476d43c452143f3cf17dcf52a91f831d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:0b:99:7a:f5:45:cd:60:56:7d:f8:1d:b6:
b9:df:1e:95:36:ab:a9:29:ad:5b:8b:88:89:4d:94:
6e:8c:91:9d:ec:be:18:80:bf:17:72:c9:8a:39:68:
b0:76:42:e1:36:a2:e3:66:33:9b:d1:a0:3d:0a:55:
59:6a:5f:18:1a:b3:38:a2:db:fe:23:ff:c2:d6:de:
a7:0a:10:53:52:34:c6:2b:b9:ab:51:5f:43:a9:eb:
e2:a2:b8:3a:0b:8a:29:b4:b1:36:0d:ca:f2:19:6a:
c8:97:49:6b:f8:a2:6e:87:4a:77:52:fd:6f:b4:17:
b5:6a:95:0c:18:25:c7:6f:fb:ec:14:a0:5d:19:7c:
98:16:bb:41:5d:61:35:a5:a3:56:c5:ef:99:2b:b7:
71:45:cc:aa:dc:84:11:e4:d8:ac:c8:eb:dd:8a:ed:
e6:09:a6:6b:ab:34:1e:a2:b2:a2:00:cf:09:6d:1d:
66:aa:72:aa:8b:31:b8:65:fd:59:90:fa:a8:c5:1b:
2b:20:70:5e:c6:61:93:62:79:68:7f:48:e7:8a:55:
9a:50:e7:1f:f6:99:3c:f5:a8:cd:7e:67:9a:53:0d:
35:7c:1c:fb:91:32:52:57:d4:aa:c7:a2:41:98:6f:
05:a0:5f:7d:93:84:f9:cf:c0:88:7b:d9:52:45:81:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:8C:94:76:D4:3C:45:21:43:F3:CF:17:DC:F5:2A:91:F8:31:D6
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:cf:e2:1d:5b:32:5f:e2:c6:b1:31:75:28:e4:e0:81:12:
b1:8c:2f:e4:ee:73:82:85:17:16:a8:cb:ae:bb:1b:53:82:b2:
34:86:b9:41:11:8d:84:4f:bd:be:4e:d6:33:2d:35:ea:60:55:
f5:75:8b:e7:68:32:16:a8:fd:8d:36:d3:21:ce:97:20:a5:bd:
60:6d:28:47:d3:34:bf:26:b2:8e:6d:22:bf:c0:71:12:64:30:
0b:66:2e:f2:37:66:bf:3f:64:58:14:3e:b2:36:0a:65:d1:0b:
02:b4:f6:cb:c7:43:82:0c:25:2d:0f:74:0d:c0:3e:00:00:ef:
18:e3:5d:e3:5c:8b:cc:15:02:56:9e:28:19:9e:5e:34:fc:16:
4d:a2:2b:3b:49:b2:e3:be:04:ea:26:5e:4a:90:6e:ed:cb:a6:
ae:f1:94:c2:ab:67:23:e2:36:1c:90:e3:c4:94:60:53:bc:7e:
06:c7:fb:f8:46:f2:18:19:8d:2f:dc:0c:76:3a:4a:08:96:c8:
6b:bf:fc:8c:f5:c9:49:2e:ff:e1:b3:af:38:8c:b9:91:bd:a6:
34:83:63:01:c8:f8:a6:80:fd:a1:0a:2a:ae:63:06:75:2f:74:
e3:da:ec:07:22:e7:ba:2d:52:78:e0:63:5d:09:c0:a7:12:d9:
5b:54:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:42:02 2025 by rpki-client