Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: PTkJfAZ7QUHeSk5L54a5SRxDaQyx5zxIhoa3egV0dEk=
Subject key identifier: 5B:75:9C:39:BD:12:CB:78:22:68:4F:47:CD:01:DD:8C:F9:33:00:93
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0196914CA46E545035F18E08F9E533EB81DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0598
Signing time: Fri 02 May 2025 14:00:41 +0000
Manifest this update: Fri 02 May 2025 14:00:41 +0000
Manifest next update: Sat 03 May 2025 14:00:41 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: f5LpnfYlhJjY1agL6CHztEzfDryBdi/gl5daODDJAsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:a4:6e:54:50:35:f1:8e:08:f9:e5:33:eb:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: May 2 14:00:41 2025 GMT
Not After : May 3 14:00:41 2025 GMT
Subject: CN=5b759c39bd12cb7822684f47cd01dd8cf9330093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:b9:8c:d4:dd:d2:f9:a0:52:16:04:76:4d:
78:29:7f:93:6a:4d:73:2b:d5:38:b3:da:71:0d:23:
1f:4f:1e:0d:9f:46:fc:a9:e6:67:f6:42:cc:63:58:
a8:7a:de:d0:5f:a2:36:c0:11:bb:e3:e0:38:60:5d:
ba:cf:f4:a0:19:0a:a5:a5:c9:f7:69:c8:a8:ec:8d:
63:9f:d0:7f:0e:1f:b8:dc:66:ae:5e:38:52:87:9a:
ac:b9:f9:9e:6e:60:c5:52:8b:fa:e8:e7:bf:b2:fa:
b8:1f:c6:2d:48:0e:79:ef:d7:66:11:e1:ca:d0:5e:
10:24:35:da:58:d2:c9:92:ac:73:ed:32:a9:c9:02:
89:e2:8c:a3:a4:4b:2e:52:eb:3a:01:c0:f8:8f:f3:
e5:aa:b7:c0:4f:e3:97:63:e2:bd:f5:fa:04:fc:ca:
29:d9:2f:27:e9:cf:91:66:85:21:90:c8:d2:98:04:
d3:92:e7:9d:5e:fd:0f:1a:cf:cc:de:f9:03:d1:69:
28:53:12:21:fc:26:3c:35:1d:c1:dd:8b:40:81:34:
d9:f0:95:71:25:4d:a6:ae:7a:27:8b:87:d6:c1:36:
30:2a:17:db:31:16:7d:ab:ce:33:97:ce:f6:48:c5:
1a:96:f4:29:e7:2b:ea:8b:bd:d1:42:83:f6:5a:91:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:9C:39:BD:12:CB:78:22:68:4F:47:CD:01:DD:8C:F9:33:00:93
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:14:90:00:8b:f9:95:56:2f:e5:0e:5e:46:93:de:f8:0b:
d2:f9:f4:3e:74:de:bb:44:d4:4a:f7:53:7f:e1:c2:7c:1f:db:
5d:65:eb:48:c2:f1:01:7d:81:91:51:2c:5d:af:b8:77:c6:1f:
38:6b:b6:1e:e0:de:f7:bb:49:45:3a:a8:f5:09:78:ee:ac:81:
9f:8e:cf:d0:f7:8f:2f:29:47:83:17:b9:6e:d5:53:b4:23:2b:
aa:9d:fa:08:a4:ce:31:66:11:ad:7e:07:9e:40:66:6f:ed:36:
6c:83:38:30:e1:50:1a:14:ed:c3:13:05:ce:6e:0a:2b:29:0e:
ea:a6:fd:98:f7:5c:ab:fe:4d:91:e7:a7:2f:f7:69:96:2b:06:
92:3c:68:f7:02:46:0c:ad:25:50:0e:fd:17:11:b6:8a:5a:9d:
4a:fb:33:39:93:3f:15:02:ad:0a:f5:b5:3e:ab:ac:37:be:8e:
d9:59:ce:c9:0a:7b:0c:92:e1:c4:97:38:c4:fe:2a:8b:46:28:
2d:6c:48:db:79:66:51:22:94:bc:20:4f:12:ec:55:b6:cf:a6:
ff:4f:34:52:a5:57:89:4e:0c:a9:53:10:21:ee:47:28:c5:3d:
81:33:b6:27:7a:82:1d:77:ed:be:09:23:86:18:2e:6a:04:3a:
17:86:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:37 2025 by rpki-client