Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: ntmW+c9G+2qN9sGqAZZtLHQeTjb+nGWqtgAOzllSRJA=
Subject key identifier: 56:F0:4A:0A:FD:41:82:F3:22:5C:EF:23:4B:A0:D8:89:FA:83:DC:5C
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 0196925FBA7EFCEF6E5BD03F10181A5A31F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0AF0
Signing time: Fri 02 May 2025 19:01:09 +0000
Manifest this update: Fri 02 May 2025 19:01:09 +0000
Manifest next update: Sat 03 May 2025 19:01:09 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: We5Fd7WMv7cvrhVD/6Ua02YRVZfUzRlQBPZIZwHRICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:5f:ba:7e:fc:ef:6e:5b:d0:3f:10:18:1a:5a:31:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: May 2 19:01:09 2025 GMT
Not After : May 3 19:01:09 2025 GMT
Subject: CN=56f04a0afd4182f3225cef234ba0d889fa83dc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:67:01:16:e1:b8:3d:ad:03:1d:5f:33:2e:
d8:72:e1:ee:13:46:ec:1e:d1:75:a1:87:72:82:20:
d2:2a:33:81:76:4b:5e:4c:1d:01:c8:5a:25:d6:8a:
2d:ec:08:cc:89:33:2d:f9:b0:0e:91:0a:bb:e6:f1:
db:b4:62:d5:c4:f5:38:de:3f:78:30:a9:64:45:68:
15:b0:4d:4b:f5:c4:ad:d9:75:65:3b:5b:c0:84:09:
cb:c3:10:bb:21:8d:0b:ac:65:15:b1:28:82:9d:8f:
83:ef:4e:df:fb:a7:12:d5:bd:55:71:ec:65:ca:3a:
b2:80:99:0c:01:6c:1a:3b:4c:36:a6:42:dc:d7:5c:
7d:86:34:8b:36:77:ad:2a:0a:4d:1b:4e:96:14:01:
89:52:4e:86:8e:f6:49:f8:8c:c7:fc:54:57:67:2a:
9f:43:9c:a3:ca:8a:dd:c3:ef:d0:0a:ea:93:be:7f:
12:aa:7f:96:a3:45:0b:c0:13:83:8a:fe:d5:7e:c6:
f0:03:fd:fc:01:1f:cc:bf:e5:ff:ad:00:16:e7:5a:
33:fb:54:47:48:40:40:6d:34:a8:e3:09:7b:f2:a2:
e5:89:4b:8f:ce:94:ae:1a:2c:3f:08:b2:26:19:02:
61:ad:2f:41:6e:15:dd:d7:11:87:ce:3e:ad:2e:8a:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F0:4A:0A:FD:41:82:F3:22:5C:EF:23:4B:A0:D8:89:FA:83:DC:5C
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:64:ef:71:ad:6c:e7:cf:fa:f3:85:f0:61:90:e3:91:59:ca:
cc:dd:0c:4d:fc:64:be:83:6b:45:de:5d:67:33:16:e8:9f:29:
a2:e3:dc:71:8f:92:e3:7a:af:a2:b0:dd:9b:0a:95:16:4e:27:
a9:6e:78:c7:0b:8f:12:b1:57:67:8e:85:50:db:a9:ed:25:fc:
1b:18:54:58:1e:11:0d:1d:b1:a8:03:14:70:96:28:3c:4a:1f:
c5:5b:1d:95:2c:99:45:fc:36:51:a4:a7:0c:3d:80:c6:3f:fe:
5a:1b:9a:2a:1b:5b:34:82:c9:e1:f8:23:cf:a8:c5:b0:2b:92:
53:b4:f7:49:3a:b3:38:7c:14:7f:29:05:6b:48:e5:bc:7b:7e:
84:f0:b7:c2:10:e4:a0:df:75:72:1e:1e:cc:bb:84:11:56:99:
7a:cf:d4:32:16:9a:17:18:9e:dc:12:05:d6:d8:81:52:18:30:
18:7d:74:96:a0:5b:25:88:03:7f:f9:78:3b:b9:bc:68:51:bc:
26:29:7f:c7:43:da:6a:23:6a:08:d9:c7:15:a6:57:ef:29:dc:
83:3a:e6:77:37:d4:bc:28:79:d4:aa:7a:38:fd:a3:24:e5:4e:
ba:fa:d2:9b:75:d0:82:93:d3:45:de:84:e8:49:33:f4:ce:ca:
35:91:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:58:14 2025 by rpki-client