Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: PuxIm26Jo89hKq0J3rG/m4JfaEw4BR+E/6UcKpIA3BE=
Subject key identifier: A0:E6:6A:A4:30:F8:5F:1B:D5:21:8C:3A:7C:4B:2E:A9:E2:B9:92:8A
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 0196741E40521AC6526545C6FEC6F2FDBA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 11A3
Signing time: Sat 26 Apr 2025 22:01:01 +0000
Manifest this update: Sat 26 Apr 2025 22:01:01 +0000
Manifest next update: Sun 27 Apr 2025 22:01:01 +0000
Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: KRBEV80q0X/gnzWovWnkHGrJHP1WQIqgo66Sech8ny4=)
2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:40:52:1a:c6:52:65:45:c6:fe:c6:f2:fd:ba:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Apr 26 22:01:01 2025 GMT
Not After : Apr 27 22:01:01 2025 GMT
Subject: CN=a0e66aa430f85f1bd5218c3a7c4b2ea9e2b9928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:53:02:ba:09:0c:21:49:21:39:da:ec:17:
73:45:cd:1a:0c:e7:6c:dc:7e:0d:2b:2e:49:16:4a:
4f:76:32:89:b0:a1:4d:e4:e1:19:9c:c8:10:ae:e8:
a4:33:f7:b1:81:bb:8e:a1:c3:cc:6a:ac:05:88:3c:
b1:a0:9c:fb:3b:e9:7f:eb:dd:20:49:5c:44:45:2c:
b0:39:d7:b3:2e:e7:2d:fa:c9:b7:77:52:1b:bb:95:
dc:d1:67:b4:4e:4c:30:7c:53:d0:e2:bc:0d:32:30:
d2:4c:5e:e5:7c:72:aa:e4:5c:77:3e:08:8e:56:90:
d4:41:54:15:45:a2:10:93:18:ce:54:d4:9d:53:9d:
85:64:9b:85:4b:be:61:db:81:2e:6c:37:ad:c8:d3:
ce:0a:01:2c:c0:94:b0:d7:3f:c6:98:38:51:58:d0:
28:1b:dd:4f:1b:a3:03:73:20:85:15:fa:25:3a:03:
cf:cb:bc:c8:33:b7:c5:be:7c:0c:43:7d:60:c4:5c:
d4:8c:ca:77:5f:70:1f:c0:63:e8:a3:00:54:8d:49:
ae:c6:51:66:88:55:cd:09:50:5b:05:02:df:d0:fd:
3b:ed:5c:af:ad:e0:8f:5d:b0:c1:d5:61:f4:44:09:
0a:13:9f:2d:ae:f4:0e:fe:fc:db:05:87:4e:f4:fc:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:6A:A4:30:F8:5F:1B:D5:21:8C:3A:7C:4B:2E:A9:E2:B9:92:8A
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:19:f2:f5:aa:a1:c0:b0:0b:b4:94:e2:ff:8d:10:31:f0:d8:
28:b5:4d:ed:b8:d1:98:ee:fd:54:d8:1c:16:70:ba:3e:9d:db:
b6:41:47:47:57:87:d3:74:01:4c:20:24:85:6d:5d:0b:30:38:
54:88:78:dc:06:a6:b4:31:36:dc:b2:d7:9c:9b:25:35:ff:e2:
e1:0a:29:91:06:8d:1d:08:39:34:92:66:8a:29:d6:21:71:b2:
f7:df:e9:97:50:c3:04:b1:05:12:0d:1a:f0:1b:21:76:3a:60:
b4:9f:75:f0:40:f4:d7:61:b9:ca:f0:2e:ca:45:af:42:94:ad:
54:1d:eb:c6:d5:ed:e4:97:34:aa:ce:08:18:69:a0:6d:a3:ff:
42:8e:7e:6d:4f:e6:7a:e3:48:8d:73:fe:5f:19:6e:78:94:0d:
ad:b4:21:81:16:24:cb:4a:71:70:2c:47:b2:5f:fb:75:d6:c6:
7a:9f:67:bd:45:99:45:87:e2:96:f2:af:a6:ff:ce:d4:39:84:
69:dc:90:a6:80:7e:40:e9:52:d6:8c:b6:4a:65:9f:70:3a:28:
3b:a1:01:ab:01:ae:c7:71:d4:43:66:a8:55:19:77:da:b1:9b:
a1:e6:0a:03:1e:1a:84:18:ec:14:5a:43:7b:83:6d:4f:18:3b:
16:67:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:29 2025 by rpki-client