Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: AQ+s1bXpEqWXpIxFbKrg5AEhsIrlV5mf8/Zb3nrnUig=
Subject key identifier: 4B:6F:19:3F:4E:D3:B1:6D:80:07:AE:EE:35:9E:C4:72:7F:60:E2:F4
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0196857FB07ED202B254071CA2B96EEFFC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0259
Signing time: Wed 30 Apr 2025 07:01:00 +0000
Manifest this update: Wed 30 Apr 2025 07:01:00 +0000
Manifest next update: Thu 01 May 2025 07:01:00 +0000
Files and hashes: 1: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (hash: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: cog/8OgEiVjLt2TTaUqVCWI07sV6He9Mc0BJIJSnZTs=)
3: yqEmqcbhmnb46ykBCYCzd7P1rRM.roa (hash: VNz3bBdEChpstgbAZJ0LtBM0pJErcl090waf56cLjb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:b0:7e:d2:02:b2:54:07:1c:a2:b9:6e:ef:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Apr 30 07:01:00 2025 GMT
Not After : May 1 07:01:00 2025 GMT
Subject: CN=4b6f193f4ed3b16d8007aeee359ec4727f60e2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:4c:49:ce:da:57:ad:5e:0f:cb:32:04:1d:
75:71:f8:52:26:7b:6e:dc:79:08:24:a1:5d:0a:97:
4d:7f:71:79:6d:c0:07:fa:c7:40:3a:f2:55:13:b1:
18:ca:18:0c:b5:77:3b:45:70:34:d4:05:85:cd:73:
44:02:9e:90:6a:66:f9:a2:ec:f4:1f:f0:2c:74:50:
77:c8:7c:9c:8f:e9:5e:ee:e4:13:b0:f6:01:c7:d2:
4a:f1:e4:55:27:0c:9a:7a:16:27:22:03:db:aa:1d:
36:fa:ea:36:da:db:02:3f:fb:e5:22:59:05:96:01:
14:f8:1f:0d:89:e6:17:51:ad:16:ce:a0:8e:90:d7:
eb:79:4d:b6:4f:2b:5c:47:09:82:ac:3e:ed:72:6a:
0e:10:31:69:4f:8a:4b:f3:42:07:40:12:db:95:cd:
23:6e:8f:c0:f9:bb:83:5a:dd:6c:d7:75:44:bd:5a:
d9:c2:52:83:7a:d0:f1:68:35:f9:2f:d9:b6:b3:bb:
40:85:00:05:00:22:a0:c5:40:bc:71:6f:3f:34:e1:
f9:39:13:49:7f:87:64:5a:48:f6:e9:23:a4:ab:62:
6c:46:e7:27:5f:2b:71:5d:4f:6c:51:60:c3:33:74:
31:80:95:ee:e2:65:cd:6a:12:c8:2a:4b:c0:47:be:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:19:3F:4E:D3:B1:6D:80:07:AE:EE:35:9E:C4:72:7F:60:E2:F4
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8d:54:bf:73:36:5b:82:f0:57:e5:93:63:82:2b:52:47:db:
b4:42:68:67:74:ed:b1:6a:79:54:84:95:fe:af:a1:6e:fc:60:
37:2c:6c:4a:10:f7:cf:a2:60:d9:38:eb:9c:6a:69:1a:ec:28:
a4:8c:ed:ce:cc:95:3c:51:23:83:bd:75:52:d9:75:e5:4b:15:
ab:ff:69:37:15:3d:e4:2a:3c:c1:f0:a4:67:a7:c2:ab:05:92:
63:be:25:58:4c:24:93:a2:19:26:6e:9e:3a:58:d5:d2:f1:25:
52:b3:29:81:1a:88:bb:23:d0:87:db:e0:c6:39:a9:4c:73:38:
f5:a6:38:fd:83:b3:5c:15:90:cc:c4:6b:ed:50:75:c9:1f:da:
3d:f4:d7:d6:91:60:48:6c:e7:75:5d:a1:db:3f:31:70:d2:bc:
54:da:af:f4:8a:8a:f0:84:b3:9a:c0:9a:89:cc:33:66:de:51:
85:fc:60:2a:ea:76:06:8e:af:3d:47:28:7f:f3:fd:62:57:f0:
52:72:8e:79:c4:d8:f9:c5:cf:d3:5a:0d:a7:51:50:80:12:72:
16:fb:ad:4f:b6:17:ad:96:ec:17:0b:83:98:4d:97:ad:ed:fe:
bc:77:7a:54:38:9f:c7:c5:d4:ea:ca:31:43:d0:cf:e3:da:74:
8d:df:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:54 2025 by rpki-client