Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: +MlcBrZLTzZrgkzTcqwy0WNEV0tPo1Qp8WJdW7GKIBQ=
Subject key identifier: 20:6A:07:5A:ED:60:91:D2:DD:DA:1D:8B:D1:65:2E:EB:FE:F1:E5:F9
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019678D648CD41AE0493ECD85C0DD0F29405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 20:00:31 +0000
Manifest this update: Sun 27 Apr 2025 20:00:31 +0000
Manifest next update: Mon 28 Apr 2025 20:00:31 +0000
Files and hashes: 1: 46WoegmIkS8QL_J6FbxBkD87iiI.roa (hash: U0pIUVkWJNq7HiCSxGgpV90jaz+MKbll3yx6GCWcg+0=)
2: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: 3G/ZukOsam23L/wQ/folkhSOx5lp0jwGUfJGbFI2skM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:48:cd:41:ae:04:93:ec:d8:5c:0d:d0:f2:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Apr 27 20:00:31 2025 GMT
Not After : Apr 28 20:00:31 2025 GMT
Subject: CN=206a075aed6091d2ddda1d8bd1652eebfef1e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:17:26:07:32:76:55:7d:77:07:87:a2:c1:
0d:b1:50:19:05:84:21:7a:70:5d:e3:b3:3e:1e:b5:
9d:ef:ca:36:85:a3:a1:7c:27:6b:16:fe:99:15:22:
aa:4d:73:f3:96:c3:ea:f6:9a:b6:e6:eb:7d:4f:b8:
31:6d:f4:94:d8:91:07:0f:0e:da:d4:4e:35:56:d7:
ed:91:ae:7d:54:86:db:63:c5:88:11:38:42:e7:0c:
f2:98:85:6f:f2:ab:cd:83:c4:b7:52:ca:3c:ea:56:
68:82:04:3d:9a:52:96:c5:d9:22:ac:09:9c:fe:c7:
32:d1:58:34:f2:df:85:04:80:bc:a2:d9:57:a9:7a:
ed:4d:18:50:31:f0:2e:d9:8d:f5:66:51:9a:e3:90:
25:a6:bd:dd:46:8c:fc:2c:00:1d:bb:eb:c8:f3:4a:
71:6c:8a:8f:8d:01:97:a2:19:fd:ff:6d:20:18:41:
1e:3c:69:55:bb:09:c4:19:31:40:48:9f:63:31:31:
c5:ce:68:f9:fe:0b:2f:34:a6:7e:09:eb:a2:a9:ff:
85:cc:8c:c5:5d:87:47:9f:5d:34:14:ca:a2:10:4f:
6c:70:e4:74:a8:af:f5:9e:10:3c:dd:e1:15:9c:44:
3c:df:4b:f4:42:73:dd:1e:75:0e:11:99:88:8f:c4:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:07:5A:ED:60:91:D2:DD:DA:1D:8B:D1:65:2E:EB:FE:F1:E5:F9
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:de:cf:45:cd:b6:66:8a:f8:eb:95:80:17:69:1d:f0:70:29:
91:31:f1:5d:3e:40:63:50:e8:7d:ba:e1:5f:4b:09:00:da:3b:
fc:aa:ab:17:08:35:0c:29:d2:14:66:f4:25:01:a8:19:77:36:
91:87:10:d4:33:24:11:38:b9:61:a8:85:d1:60:a5:61:c6:c7:
24:92:e1:46:45:8e:f0:d8:95:99:1b:b4:d5:04:55:4f:20:99:
8c:4c:0c:2a:9f:08:2c:95:01:ab:f8:92:ee:93:aa:21:52:4b:
60:10:c3:d2:54:06:e2:3c:70:0a:39:85:f2:1e:0f:f6:ef:91:
90:8e:cb:af:ef:22:9b:09:bb:f5:cb:d8:9c:45:82:62:f5:ce:
7e:e0:57:8d:78:31:b3:1b:09:71:95:06:41:b0:b0:ae:c4:5d:
40:b1:57:d0:b5:ea:f4:fb:e0:81:bf:0c:84:3c:e6:29:39:0e:
aa:75:a6:0e:43:53:2a:08:a4:95:9e:d9:bc:7a:e7:71:ac:35:
f8:19:40:01:52:af:9f:4f:1f:e4:68:8f:ea:91:1b:20:8e:68:
b6:5c:24:8a:3c:52:da:4e:a6:92:05:84:78:93:8d:c0:0a:af:
51:77:9a:7f:f3:ce:f5:d1:bc:45:41:c2:32:af:86:e7:0b:f8:
ea:e8:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:29 2025 by rpki-client