Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: 6YJtBCipiPpDvlBwew7w32eyWZ566meX3fbDVAwY8MU=
Subject key identifier: 0F:65:81:BF:9B:73:46:81:69:44:9F:BA:27:7E:61:13:C8:9C:F9:7C
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 01967DC5CD529EC89C043F8D2873A37D887C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:00:37 +0000
Manifest this update: Mon 28 Apr 2025 19:00:37 +0000
Manifest next update: Tue 29 Apr 2025 19:00:37 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: VyL6WBnVwTSAKVl8/ljHBX5vMx31/l8vKZWxihRVx60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:cd:52:9e:c8:9c:04:3f:8d:28:73:a3:7d:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Apr 28 19:00:37 2025 GMT
Not After : Apr 29 19:00:37 2025 GMT
Subject: CN=0f6581bf9b73468169449fba277e6113c89cf97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:88:b2:2b:79:5b:fc:ac:3a:2f:76:72:31:
3a:13:2b:ce:c7:69:a4:bc:90:c7:80:10:ed:33:7b:
f6:e4:bc:8f:56:75:0f:62:f5:c4:66:da:e0:76:60:
f6:90:5a:3e:91:75:a9:47:05:34:e9:61:8c:93:a1:
19:a5:fa:7d:82:56:7c:35:35:75:77:fc:e7:3f:ec:
e5:55:f2:e7:99:65:31:41:74:f8:82:40:2f:ab:7d:
c6:e5:c6:b1:94:81:62:7d:c1:bc:8b:1a:d7:71:34:
1a:21:ac:e6:ec:98:b6:9c:d7:a9:8a:a1:e2:42:4c:
99:d6:f8:15:25:4a:db:51:6e:1b:7e:2b:4b:57:5b:
0e:da:d2:15:75:7c:64:d8:67:9f:7d:30:58:57:7f:
21:8a:3c:47:bd:4f:b7:df:42:a6:cf:b9:6e:c9:14:
2d:76:8a:b3:4b:5b:d0:f9:6e:73:7c:d7:7c:08:dc:
5f:c9:25:c8:79:8b:0d:8f:1b:13:a7:6b:b9:21:c5:
14:2f:b0:7f:f5:a3:2c:25:da:40:94:46:e8:d9:4c:
db:8b:6b:b4:38:e4:5f:7c:78:5a:ac:28:65:36:bc:
9d:be:f4:0b:5f:08:b1:bc:ac:14:31:87:19:bf:bf:
9c:37:b6:b2:51:65:13:b2:57:4b:f9:bc:b0:66:40:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:81:BF:9B:73:46:81:69:44:9F:BA:27:7E:61:13:C8:9C:F9:7C
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:c4:37:27:33:05:4d:21:94:04:1c:7d:03:30:a8:68:3b:
d8:7c:4b:aa:61:cb:76:66:d5:59:25:fa:49:9a:96:64:2b:81:
d6:b2:35:56:f7:f4:1e:c1:13:d8:fc:5e:b9:ca:3e:31:cf:a6:
55:b7:3d:68:c9:73:97:a3:ca:96:18:e7:63:f7:00:c3:c1:ed:
65:99:77:87:dd:7a:ec:85:4c:bb:2d:03:76:c1:4f:8c:87:09:
21:c5:bd:06:fe:14:a6:ca:ad:e0:3e:b9:66:19:71:0e:d0:2a:
ac:46:ea:e7:88:66:9c:d9:c7:ed:d7:d6:9a:94:58:e4:06:81:
c2:9c:15:fc:48:47:ab:d1:96:60:88:ac:73:97:2f:9d:31:db:
8e:de:be:bf:be:e5:3d:93:75:6c:f8:83:d3:1a:9d:96:e1:bd:
ff:67:17:58:ab:0b:8d:18:5a:26:a6:d7:d4:91:c2:47:c1:28:
90:a6:ec:ef:7b:5e:1c:93:e4:9f:c0:11:22:c5:13:83:ba:52:
0c:73:71:e3:f3:fe:31:cf:e4:dd:63:27:cd:13:0b:7c:1f:71:
5c:30:7c:bb:92:54:56:a1:73:af:b4:2a:1d:a4:03:d5:cb:82:
85:79:00:85:52:12:36:d0:61:ab:7b:1e:79:e1:79:ba:07:06:
7f:5a:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:28 2025 by rpki-client