Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: wvDXCuGzeNQVzZl6i0xt8Rrd1TKOhqiSBVEu/jxK2AU=
Subject key identifier: EA:67:B7:04:33:23:53:EC:37:18:4E:A2:8A:A3:1B:2E:6E:2C:15:CD
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 019693DFE1A29A5A444588AACEE3EDAC2A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0957
Signing time: Sat 03 May 2025 02:00:45 +0000
Manifest this update: Sat 03 May 2025 02:00:45 +0000
Manifest next update: Sun 04 May 2025 02:00:45 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: H8Z/9K495od1581DaYaR+IDsNkOfUxI9KOz6D5Q/Yek=)
2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:e1:a2:9a:5a:44:45:88:aa:ce:e3:ed:ac:2a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: May 3 02:00:45 2025 GMT
Not After : May 4 02:00:45 2025 GMT
Subject: CN=ea67b704332353ec37184ea28aa31b2e6e2c15cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:b7:ff:d0:9f:74:5d:05:84:73:34:d3:8c:
fb:bb:a4:97:f9:00:da:e3:1e:37:35:a1:c9:b0:f5:
fb:44:56:d7:9f:b5:38:1e:0a:75:c8:bd:b4:28:01:
5a:d5:71:79:a0:0b:c6:93:89:88:44:69:93:62:5a:
5d:d7:99:ee:73:2c:a0:bf:92:fc:6d:8c:80:a0:d1:
5c:6e:97:2e:59:e8:8c:07:23:8d:b4:89:a0:a6:d5:
19:62:2f:13:dd:7e:c8:9a:8d:70:8a:22:97:fa:73:
26:90:0a:c7:a8:64:5a:95:b2:6d:62:de:a4:06:05:
e6:b9:2b:fe:07:bb:5e:f5:0f:52:b1:ee:1d:01:71:
fc:41:ce:d4:e2:d1:93:31:75:e7:3b:5e:5b:ef:2b:
e7:5a:b2:38:fa:52:ea:8b:05:6a:e6:db:42:4c:7b:
c9:19:77:fd:e1:3e:8b:22:76:09:79:ef:37:f8:62:
02:97:5d:40:ca:c6:82:b2:1d:9b:9f:a7:e5:6b:d0:
4c:3f:bf:2d:46:58:d0:96:6b:62:af:0a:84:82:82:
da:c5:13:53:b3:f4:81:d1:49:91:6f:7f:53:14:84:
db:c6:49:85:06:93:b1:63:92:8c:c2:04:41:e6:f3:
0f:c3:de:d0:06:f0:aa:80:2b:db:f6:38:d0:46:50:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:B7:04:33:23:53:EC:37:18:4E:A2:8A:A3:1B:2E:6E:2C:15:CD
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4a:0c:79:3e:f1:a7:87:bc:d5:1c:ca:aa:8e:c7:af:a4:13:
de:80:02:d6:d3:ad:83:cc:de:58:f1:2b:22:56:41:59:5f:2b:
3a:1f:b1:42:37:4c:fa:ce:e3:04:9e:b1:6a:e6:5e:2c:6c:87:
ef:6c:f3:da:e5:8e:f7:76:19:4e:4b:63:3d:68:5d:50:2a:8c:
e2:1e:f4:29:e5:ee:02:ce:3b:fa:c0:ad:3a:62:4a:5b:af:cf:
10:51:c8:b4:74:55:b5:f5:08:05:fd:30:1b:e2:13:78:e4:3e:
61:a2:3b:32:47:e2:87:48:13:62:75:4a:fd:e0:90:74:e8:eb:
3c:39:a5:bd:d6:99:c4:68:46:f4:82:79:6c:a1:7d:cf:38:a4:
9d:63:ab:20:19:86:52:67:43:71:78:ea:ae:01:7c:f3:e5:c0:
e6:4e:de:f6:2f:17:bf:48:f3:c2:8c:f3:53:7c:ae:67:d8:4f:
7e:84:3f:0f:40:7b:1f:b5:20:26:b2:8e:e2:98:e1:85:19:00:
6e:18:e0:e0:26:29:41:49:5d:0a:e2:de:8d:3d:20:bc:dd:91:
e1:cc:4c:fa:0d:30:aa:43:40:b6:54:7d:c7:d9:36:7a:23:84:
62:fc:ff:49:67:50:6f:70:01:eb:a9:6e:38:c6:8a:75:d5:24:
92:38:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:21:38 2025 by rpki-client