Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: eo1LkIe4FGzWxI4Gi6RidhIS+YJYn8jczc8LsYCXnWk=
Subject key identifier: 63:46:70:5D:7B:2C:D0:35:2A:4D:C8:EA:E8:59:B0:79:1E:5B:8D:5E
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 019681A3669CC2FDD23122861268A57C2CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 13:01:31 +0000
Manifest this update: Tue 29 Apr 2025 13:01:31 +0000
Manifest next update: Wed 30 Apr 2025 13:01:31 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: siF/g4UbD13nM9x+UC2pVY2koTZT7VgdrrPSRT6htJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:66:9c:c2:fd:d2:31:22:86:12:68:a5:7c:2c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Apr 29 13:01:31 2025 GMT
Not After : Apr 30 13:01:31 2025 GMT
Subject: CN=6346705d7b2cd0352a4dc8eae859b0791e5b8d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:23:39:00:1b:cf:87:f4:68:0b:95:c4:ff:
db:c0:60:e8:35:2f:00:d9:fe:38:33:ff:87:0d:4b:
e7:b0:7f:bd:fa:a4:99:b7:f2:44:2a:b1:c8:ae:80:
51:36:59:d1:88:8e:23:4a:a1:e3:fe:48:1a:48:55:
87:25:7e:c5:fc:ac:03:42:e8:3e:d6:f5:0f:89:8a:
8e:a8:f8:da:04:e9:0a:b0:f9:60:e0:d9:1e:eb:10:
9b:dc:5b:a6:43:ae:62:93:64:92:9f:ab:61:db:a1:
35:7c:88:df:4e:3b:b4:cc:fc:27:c9:f7:8a:96:b9:
da:89:44:21:67:56:4d:29:d1:54:e1:33:b2:ab:c6:
c5:c5:e8:a2:5d:b3:f8:78:5c:5b:91:17:15:39:fd:
cb:44:23:85:22:b3:32:5e:ed:b4:87:a2:a0:70:d0:
bc:d5:26:fd:e3:49:5f:c0:5a:8a:08:91:65:52:f9:
8d:8d:08:96:ed:4e:70:a4:18:99:5f:3c:03:b8:ed:
eb:09:91:10:cf:9f:5a:ab:93:95:1f:f1:ee:59:1a:
02:d9:95:57:0c:d6:66:b7:66:58:85:9c:01:62:93:
8d:9b:44:c7:23:c7:1a:6a:77:3f:8e:02:d7:05:96:
6a:48:c1:01:da:96:69:d1:b8:ab:d9:71:a3:a3:82:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:70:5D:7B:2C:D0:35:2A:4D:C8:EA:E8:59:B0:79:1E:5B:8D:5E
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:c4:ad:af:57:48:09:2d:2e:27:db:06:17:71:e9:9a:5b:
15:aa:67:06:c2:84:cf:97:39:69:10:57:9d:56:4f:be:f2:4e:
79:03:d2:9d:d2:f6:c4:f1:c9:02:f9:61:f2:76:06:26:82:80:
df:da:45:89:98:5a:68:47:43:49:de:ad:a2:06:26:3c:b4:80:
a1:ac:b4:7e:d3:d8:c5:87:44:51:a5:cd:2f:aa:a4:f8:41:1f:
fc:32:c4:39:82:6d:b2:32:e8:19:ea:0c:6d:a9:9e:9e:54:38:
88:e3:23:e5:02:af:fe:b2:56:8f:39:e1:b2:10:22:0c:fc:bd:
06:42:b1:a1:f9:ce:27:04:39:f7:41:3b:2b:72:d0:79:52:52:
ba:85:17:be:f7:bf:05:44:a1:5d:a8:1a:03:18:68:2e:ba:d7:
cd:8d:a4:c2:5c:34:c1:d1:2d:d1:73:6e:29:bc:af:65:c7:ea:
1f:e2:34:61:dd:dc:f7:12:4d:d2:c7:de:87:0e:68:48:8a:60:
7a:41:14:96:36:3b:02:c4:f6:99:31:d7:e7:6e:80:39:8d:52:
2d:fa:c1:3c:34:75:90:43:f4:a9:c2:11:cd:09:09:e2:20:07:
d1:f9:53:c3:7f:6d:8b:ac:30:48:eb:95:16:09:a2:0d:4b:a3:
3f:8a:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:06 2025 by rpki-client