Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: R8tQWJouTtpc8+858a0w0WBVAAn0VpHZK8i5RlG6zLU=
Subject key identifier: 1E:0D:BF:21:F0:83:C2:D1:E9:1C:54:FC:44:01:44:89:A4:7F:19:F2
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 01967C0E2C8C053E39D5DBA9027F644C7A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 11:00:25 +0000
Manifest this update: Mon 28 Apr 2025 11:00:25 +0000
Manifest next update: Tue 29 Apr 2025 11:00:25 +0000
Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: wxJhX/nBIrMM9S7kAzQBM1HuYsFrQ3u9ZadpYNxp7G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:2c:8c:05:3e:39:d5:db:a9:02:7f:64:4c:7a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Apr 28 11:00:25 2025 GMT
Not After : Apr 29 11:00:25 2025 GMT
Subject: CN=1e0dbf21f083c2d1e91c54fc44014489a47f19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:d0:43:ea:0d:77:b1:4e:a8:5e:e2:16:75:
97:80:b3:74:a4:e4:d8:a8:bd:60:60:55:a2:12:67:
67:70:52:3c:7a:31:75:33:9d:b2:06:1d:e8:34:a6:
bc:a3:ef:12:13:54:63:59:60:e6:89:06:c4:9e:aa:
bf:9e:91:30:9b:ff:98:fe:fc:e0:4a:b1:89:ad:38:
02:ce:46:73:48:7f:16:31:ab:1a:2e:29:23:e1:54:
22:14:51:36:78:10:59:c4:0a:01:14:0b:c1:7c:bc:
f2:01:f9:c8:50:93:ad:77:c8:a0:8c:b4:d8:60:83:
d6:34:6f:9a:a9:94:2b:85:35:42:1e:92:02:96:f9:
98:00:38:1f:a3:12:9c:d1:9e:29:ef:28:68:79:b1:
5b:a4:b3:41:9d:ef:c0:88:82:6f:8a:b5:c4:2d:96:
f2:69:6a:fe:29:be:aa:97:12:51:17:b9:17:50:6f:
ca:0e:35:98:96:07:bb:b0:b2:21:f8:fd:09:d2:6e:
f5:e0:43:2f:33:e8:7f:7f:af:6a:d2:b4:0a:0e:c2:
41:88:76:af:dc:d7:8a:74:67:06:8b:7d:78:ee:41:
96:58:f6:89:6b:38:f3:9f:41:29:33:79:fd:9a:3f:
aa:68:81:a0:3c:87:74:b1:cf:02:74:cd:a3:94:29:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:BF:21:F0:83:C2:D1:E9:1C:54:FC:44:01:44:89:A4:7F:19:F2
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e6:31:bb:a6:d9:bf:ff:17:97:3b:e8:4c:e4:c3:96:8a:e3:
f1:2f:fa:e2:a5:a8:54:04:ec:50:1c:d3:64:e2:2b:e0:26:80:
fc:85:e9:cb:ca:c7:d1:78:62:d3:a5:7e:96:9f:42:3d:bd:e3:
18:4f:80:de:6a:51:23:1a:c5:59:69:ab:68:fb:51:25:43:50:
d4:f0:dc:92:76:05:97:99:35:d8:78:5d:2c:bc:af:8f:6e:05:
66:dc:be:6f:30:e8:de:d6:81:1b:c2:b3:7e:89:dd:d6:d7:7b:
c0:bc:c9:0d:46:1d:4c:76:76:6e:4a:57:ac:eb:01:a9:51:80:
d1:0b:27:85:48:45:ce:2c:75:db:e5:c8:da:c1:33:e7:75:cb:
77:8b:6d:71:bd:8c:35:27:29:c9:ab:1a:66:a9:95:a0:c5:8a:
ae:6d:47:aa:36:c7:74:9c:b3:20:c2:d0:4b:67:6f:1e:79:51:
e6:8d:0f:56:d6:3f:57:a3:2b:c1:02:1b:b1:f8:e7:c8:aa:7d:
c9:fa:cd:60:5b:71:55:12:70:a7:78:62:1f:a2:29:51:83:6f:
aa:7d:98:99:ba:68:6e:cc:45:56:15:a1:5e:0b:5e:0c:dc:9b:
83:f1:4f:0a:99:03:cb:2f:af:b8:8a:41:71:51:1e:cc:b2:23:
45:1c:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:29 2025 by rpki-client