Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: r9Ns2qn7KNOzpROBA+8dPSKZXyDedapWz0YEjbBIt7I=
Subject key identifier: 18:D1:19:7B:5A:D5:08:36:3E:2F:D0:D5:38:B8:51:83:AA:20:BC:D6
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 01968691D7C5080986F8D643E25F836BDB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 12:00:26 +0000
Manifest this update: Wed 30 Apr 2025 12:00:26 +0000
Manifest next update: Thu 01 May 2025 12:00:26 +0000
Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: 5GisaOpG2poUepH5Sa1P1RgVA0qf9/2oqCoOg3tsjBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:d7:c5:08:09:86:f8:d6:43:e2:5f:83:6b:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Apr 30 12:00:26 2025 GMT
Not After : May 1 12:00:26 2025 GMT
Subject: CN=18d1197b5ad508363e2fd0d538b85183aa20bcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:6e:fb:bd:48:74:03:b6:85:07:04:b0:db:
eb:28:9c:ef:57:aa:e7:96:d8:49:9a:0f:0f:b1:6c:
48:85:e1:00:73:9e:c6:b1:12:c1:e5:60:5a:d2:d0:
df:57:4e:ba:d7:49:9a:9d:83:1c:e1:e0:ba:11:26:
63:9b:d4:46:28:bd:44:ef:2c:8b:c0:03:5d:a6:68:
19:8d:e4:83:74:da:d3:56:d8:9e:18:79:73:7d:39:
91:c7:06:da:1a:be:13:62:bd:7b:59:2a:68:0b:f8:
e4:e6:b9:35:10:c5:96:f0:12:d7:05:78:e6:ab:60:
c2:26:17:fa:e4:97:57:5b:8f:e6:a0:51:3e:58:30:
92:d2:14:6b:53:2f:6a:ef:0c:c8:2e:e4:bd:3b:80:
52:b2:96:ed:fb:ce:71:aa:ad:19:91:4b:d2:1b:7a:
e4:88:8d:17:92:bf:a1:25:33:5f:3a:2a:9b:53:4d:
91:e9:17:06:48:4b:c2:2c:6d:1a:ea:72:ce:02:80:
7b:0c:be:d5:bd:ef:76:ed:71:fc:b0:3b:54:6a:d8:
8e:76:47:ed:a3:d6:99:0c:c0:81:2a:3c:c2:c3:8f:
9f:63:dc:d3:9b:31:87:4f:a2:a3:c4:a8:d9:2d:ec:
59:08:79:d2:30:01:e8:d6:ef:b6:d7:84:ae:ac:7e:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:19:7B:5A:D5:08:36:3E:2F:D0:D5:38:B8:51:83:AA:20:BC:D6
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a4:b9:aa:cf:9c:38:c8:04:c8:63:88:99:a9:d1:13:6b:f2:
90:74:0f:eb:32:28:0a:52:23:40:09:5e:58:4a:ba:5b:a3:f7:
5b:ac:e2:0e:fb:0c:b1:64:6a:be:4d:7f:28:e5:90:8b:80:cd:
eb:d0:88:72:b0:02:d8:86:7c:f2:de:34:39:ec:6b:40:b2:02:
97:7d:e7:04:4d:cc:b4:28:67:97:40:85:cb:bd:bd:7f:ff:5e:
dd:28:b6:c2:56:6c:51:96:26:e5:00:4d:95:e2:c3:df:87:79:
04:27:70:4e:99:b6:e3:d0:61:dc:51:c7:2e:93:3a:c0:47:fc:
9c:65:d4:17:e7:d0:63:d8:f4:11:d9:a5:95:7c:18:4e:81:61:
27:e9:2c:73:90:fb:2f:f5:67:07:0e:0b:de:f9:ba:f8:5a:81:
e5:14:ae:7e:33:2e:20:ad:22:b7:92:ce:17:7d:61:c7:58:ab:
aa:05:f4:31:56:67:b9:39:bf:2b:5a:06:68:19:39:b9:18:fe:
65:8d:9c:cc:59:27:fd:7e:2d:b5:25:03:0b:8a:21:0e:48:df:
56:3e:6e:77:18:e2:6f:26:6c:f6:b8:9a:fd:fe:7e:e2:57:1f:
9d:26:6b:3b:f8:88:e1:20:75:18:e0:a5:f1:d1:37:1d:cc:2d:
24:ae:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:33 2025 by rpki-client