Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: CYiZo0kY9rDeiDbcVWi9WkLgGgdBrYZN+rh8m4AykkQ=
Subject key identifier: 2B:61:C6:A0:98:03:92:33:AE:24:9F:ED:D9:20:7A:26:C5:DB:B5:04
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019689CA9216784FEAFB4B4B9F48AD8B0EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0A60
Signing time: Thu 01 May 2025 03:01:16 +0000
Manifest this update: Thu 01 May 2025 03:01:16 +0000
Manifest next update: Fri 02 May 2025 03:01:16 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: RJQkmhom9bQDpfmJoQGeLr0uX73pm3xgc5nGcWfW+7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:92:16:78:4f:ea:fb:4b:4b:9f:48:ad:8b:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: May 1 03:01:16 2025 GMT
Not After : May 2 03:01:16 2025 GMT
Subject: CN=2b61c6a098039233ae249fedd9207a26c5dbb504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:b1:c0:6b:58:e4:40:ad:d8:90:ea:2c:14:
26:d5:e4:6f:a1:1a:f2:e2:12:1e:55:c2:ee:9b:f4:
b9:42:a8:01:43:b7:4a:54:be:0e:37:c1:eb:7d:9a:
af:31:75:cc:cc:cf:32:8d:5a:a4:ee:9a:e6:5d:11:
b6:28:09:bb:35:56:11:8b:41:2f:91:20:62:5c:f8:
7b:65:7c:88:14:d2:54:f0:e2:3c:15:5b:fb:06:38:
52:f8:96:0a:ba:0c:3d:f8:17:95:84:93:99:94:92:
1d:c0:02:e0:d2:6c:ef:1b:b5:2b:dd:05:86:5b:e9:
8d:46:d7:7b:41:a4:59:6e:39:f7:28:f3:d9:26:7b:
74:17:a3:1b:db:f7:16:57:61:c7:52:9e:95:03:54:
81:43:38:04:62:c2:31:81:8d:a7:5a:ee:47:d3:74:
4f:6c:a1:ef:cc:71:98:97:8a:c9:a8:85:36:c5:df:
09:44:04:6c:dc:cf:02:f1:29:c1:a3:89:f6:6d:0e:
9a:1a:bd:93:42:cd:cb:d8:fe:d9:22:cc:90:ae:79:
22:34:f5:c8:77:92:64:74:f9:a7:34:f9:f9:b2:ef:
13:6e:37:8c:2b:32:1c:4f:d1:0b:dc:b6:e8:30:87:
37:f2:67:6e:1e:b8:a4:3a:df:7a:69:7d:94:58:39:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:C6:A0:98:03:92:33:AE:24:9F:ED:D9:20:7A:26:C5:DB:B5:04
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:e8:eb:06:f2:73:ce:b6:c4:77:c8:a9:a6:76:30:ed:10:
8d:04:3e:90:2d:ad:81:39:16:07:d7:42:ea:5f:62:c2:f9:b9:
ca:3b:1f:af:6b:64:a1:cd:a8:15:a4:5b:1e:9d:c9:d9:a2:58:
9b:56:22:cc:5d:7f:15:86:ca:35:3c:35:ee:bf:57:60:57:1c:
23:ae:d7:fc:90:11:7d:6d:e6:5f:a2:bf:c4:0d:97:38:3d:61:
82:0d:9a:2f:9f:91:73:8d:03:65:85:55:7a:f9:e6:dc:d6:93:
e0:f4:ef:3a:f8:0d:3e:bf:ae:02:df:7b:c0:17:e8:a7:2a:b0:
87:7c:f8:7e:69:a0:5f:28:b5:d2:f9:3e:a5:83:fb:4b:06:20:
33:bf:fb:40:53:b3:2a:19:25:f8:4f:3f:68:67:a9:a4:2d:7e:
7a:e7:8d:7d:5d:ee:5a:31:29:fb:2e:9f:4b:10:29:64:8a:2e:
a0:77:d4:e1:37:d6:11:7d:ba:7e:74:ff:6e:34:32:ba:d0:12:
45:fc:2b:d0:0c:50:2b:77:62:b9:8c:01:c1:77:ae:60:e4:12:
4b:86:3d:b3:18:52:a0:fd:35:db:79:47:73:74:9d:39:65:49:
3a:15:19:6d:15:ee:48:ef:16:49:99:d3:15:31:d2:a5:93:b2:
78:10:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:50:56 2025 by rpki-client