Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier: 38vwZIFSvpfplmWGBA6MIg6xDA0PNyHazq/yPimxf14=
Subject key identifier: CF:C9:8D:F7:3F:BB:74:79:1A:5A:50:FF:99:4D:FF:6F:CD:CB:3C:28
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer: /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial: 01968F9553DC99DEEBB2A81D76F544F30D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number: 122A
Signing time: Fri 02 May 2025 06:00:50 +0000
Manifest this update: Fri 02 May 2025 06:00:50 +0000
Manifest next update: Sat 03 May 2025 06:00:50 +0000
Files and hashes: 1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: upykzc8igkUVijVqcf/vcccJPQEEvMMqZO6e7vaIgSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:53:dc:99:de:eb:b2:a8:1d:76:f5:44:f3:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Validity
Not Before: May 2 06:00:50 2025 GMT
Not After : May 3 06:00:50 2025 GMT
Subject: CN=cfc98df73fbb74791a5a50ff994dff6fcdcb3c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:7e:e9:92:9d:5e:1b:57:7d:9d:86:33:96:
b4:7a:1d:de:0b:75:05:e5:ba:81:26:a6:b6:b0:03:
da:c4:c3:82:0d:73:7c:7f:ab:a6:0d:b0:9a:f3:72:
17:a5:24:4a:1e:c8:01:4c:58:99:14:df:4b:8d:2f:
2f:53:65:0e:76:58:3d:69:b1:1f:f0:95:4c:a6:18:
6c:a8:c8:c8:e7:d7:14:d5:15:43:b3:33:75:0b:29:
d2:12:7e:1f:93:87:a3:ee:56:1b:67:ee:ca:f3:10:
a5:03:8c:ee:90:3d:83:04:25:10:3d:40:77:bd:a5:
01:d7:8f:77:bf:6d:50:b1:c5:14:6b:1a:f3:78:23:
ff:11:14:06:03:b4:78:31:ef:37:6d:3c:6e:2a:eb:
ab:50:9f:ef:2b:65:4f:32:4b:01:b5:d8:1c:1d:d5:
dd:c6:12:b5:e4:10:ea:98:d3:1c:c9:d8:98:1a:52:
7b:19:e5:5d:18:38:09:f5:e8:2a:42:90:71:a9:e3:
0e:cf:3a:ac:68:ee:02:0a:3b:38:80:cd:ff:f9:01:
c7:de:79:f3:ff:54:9c:f8:2c:97:7f:40:a4:f8:de:
4b:39:40:d2:88:84:b8:09:c6:07:76:27:5f:fa:d2:
bf:6f:68:9d:f6:61:c8:c2:a3:6f:9b:35:0d:4f:9e:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:8D:F7:3F:BB:74:79:1A:5A:50:FF:99:4D:FF:6F:CD:CB:3C:28
X509v3 Authority Key Identifier:
keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:ea:c0:35:c7:8c:4d:b0:1b:e0:f6:e6:64:bf:d7:2c:35:
94:41:f5:cb:94:24:47:75:77:eb:11:0d:16:5d:27:fb:3a:2f:
ff:1b:b0:4d:bf:7d:23:ef:3f:1c:46:df:db:ce:19:f6:f8:4f:
42:ce:bd:81:3a:19:e6:5b:3e:12:7f:18:bc:12:44:44:aa:e6:
e3:1f:4a:0a:a4:74:00:00:06:37:79:46:a2:68:0a:e1:7e:ee:
8a:01:19:49:da:18:93:45:44:88:fc:f0:c7:a2:0e:14:d4:0a:
67:80:82:28:6e:dd:be:19:3b:d4:1d:7f:ef:4e:41:9d:28:9d:
82:11:f1:27:3a:f5:7a:fa:96:1a:36:00:2f:64:af:ff:d6:5d:
33:78:4d:e8:03:f6:75:2a:55:59:6c:f0:e0:e0:ac:fb:17:1f:
03:d0:2d:46:42:28:b6:b5:80:71:61:50:57:6a:2a:0c:0a:d5:
89:d7:e1:2e:c5:63:c3:bc:c0:87:f2:04:4b:9a:ff:ef:4f:70:
3a:a8:0e:b8:81:59:6b:a5:af:04:25:42:fb:16:a9:92:b7:f6:
36:aa:25:65:2b:cd:3a:d4:ba:90:0b:b4:c2:e9:2c:58:42:f2:
c1:ca:3d:7a:1b:80:be:1b:2e:8a:2c:51:4a:99:67:db:1d:a9:
84:c6:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:22:40 2025 by rpki-client