Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: kLxz8yrkWMUG9GDbk5d53I4/n90SBO4xBXQ5vqLdlc4=
Subject key identifier: 7D:B1:EF:83:FC:00:7B:74:08:2F:69:F0:F9:4A:D1:91:D6:77:5F:FF
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 01968D3923E1F5BAB0C113881807819CF56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 19:00:54 +0000
Manifest this update: Thu 01 May 2025 19:00:54 +0000
Manifest next update: Fri 02 May 2025 19:00:54 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: SZYTVAgZxfcv96TgWA8iVNXDbvyyihSNvyLUFCICIYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:23:e1:f5:ba:b0:c1:13:88:18:07:81:9c:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: May 1 19:00:54 2025 GMT
Not After : May 2 19:00:54 2025 GMT
Subject: CN=7db1ef83fc007b74082f69f0f94ad191d6775fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:59:18:dc:db:4b:28:15:40:e1:ab:b8:d8:
b2:7c:1b:ec:9e:43:d3:4c:46:7a:40:a7:ba:23:e6:
73:b2:59:50:16:b9:13:bb:7a:50:78:12:93:6a:78:
aa:10:ad:e9:f2:4b:92:86:63:02:ee:b7:c5:06:55:
11:02:cc:c0:56:79:d1:6d:fc:24:0e:8b:0e:31:77:
45:77:ea:e9:eb:b2:2e:51:a1:a8:c7:9e:7b:95:f5:
3d:c6:b5:ab:c1:3e:0d:5f:59:6f:c4:d3:a2:cc:ae:
79:99:b4:58:89:2b:66:3e:27:84:0f:c4:2d:e4:35:
f1:b5:fb:79:ba:7d:62:0c:91:44:69:bd:57:18:58:
19:eb:05:a4:cc:34:be:41:74:4b:b6:e4:c4:3b:6c:
d5:6f:6c:24:ad:0b:e2:c3:d3:08:1c:92:7f:64:ad:
54:55:51:a9:57:c4:60:23:a8:5a:00:9b:9d:d2:e6:
ba:3b:34:4c:5f:86:78:ec:dd:3a:9d:85:6b:fb:f8:
bc:85:92:12:68:c4:81:7b:cf:9b:b8:41:c7:34:f1:
9f:64:f7:49:a3:a3:14:74:37:d0:29:2d:3c:b2:52:
c3:81:d9:b1:44:e7:62:ce:f0:fb:69:70:e1:a9:3f:
5b:40:f0:c7:b5:4e:5b:3b:3f:e3:5a:ab:d0:dc:df:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:EF:83:FC:00:7B:74:08:2F:69:F0:F9:4A:D1:91:D6:77:5F:FF
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a8:5a:54:39:94:b8:15:bb:33:b3:61:b5:07:2b:4e:0f:f7:
ea:fd:a5:aa:84:50:6d:1f:27:8b:81:df:a1:1d:4c:2e:ad:d3:
b6:d8:c1:33:73:7c:a9:fe:8b:ad:ef:40:a9:32:9b:59:13:0f:
29:12:98:b0:cf:50:16:c8:bb:7b:0f:26:b8:4a:bf:7e:c2:46:
80:00:31:ff:31:88:61:72:8e:df:5f:7e:de:d6:76:55:0e:a4:
20:7b:70:22:64:be:3f:39:62:6a:3b:96:85:78:29:c6:02:53:
36:b2:53:e1:f8:c3:f5:61:f7:94:78:d8:5c:22:a1:9d:36:48:
79:f6:9a:65:d2:75:85:c6:5f:67:0f:1c:fa:d5:0b:9b:63:bb:
2f:dc:32:86:7d:ab:d1:e2:0e:56:1f:71:e3:ea:4c:61:ad:11:
45:6c:68:02:6c:fa:3a:ff:f2:6d:34:1e:07:d2:21:06:9f:26:
53:6b:79:80:35:4d:a7:c7:06:e3:e2:ba:ce:9d:aa:35:a5:e8:
56:32:fd:e5:f4:b1:4c:2a:e2:aa:e1:ae:4b:c7:a1:38:4d:11:
c8:b0:c5:e4:21:fc:6c:01:4b:75:fd:c7:c8:5a:17:e0:95:c1:
f0:54:1a:43:b7:d2:d8:17:37:8c:37:23:92:00:6a:48:f3:23:
66:fb:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:11:20 2025 by rpki-client