Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: xPmRrWVL6b1sV9ZA34Zokj7bklnayazUuXASXdQJcQ8=
Subject key identifier: 76:D4:AF:3F:97:64:0B:F5:CB:59:24:37:6E:31:E0:D7:20:08:34:57
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019644E8FB4852672A7A070E757383EFF839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 123A
Signing time: Thu 17 Apr 2025 18:00:41 +0000
Manifest this update: Thu 17 Apr 2025 18:00:41 +0000
Manifest next update: Fri 18 Apr 2025 18:00:41 +0000
Files and hashes: 1: JQbKzLiXioj71_u-MdomxlC3Wf8.roa (hash: bp8vDWag95o2Qc+DhqhRQf6u2+wJfYdYx7JCmtcv/GI=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: Msf6cfJDfvLIVRGbsY9riscqznff2GThptbDR6kiBhQ=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:fb:48:52:67:2a:7a:07:0e:75:73:83:ef:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Apr 17 18:00:41 2025 GMT
Not After : Apr 18 18:00:41 2025 GMT
Subject: CN=76d4af3f97640bf5cb5924376e31e0d720083457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:77:4b:69:78:bb:51:c8:b9:65:43:a9:9c:
af:97:63:ac:37:7d:c7:84:34:c0:11:d8:0a:c5:99:
65:d9:64:4a:39:36:24:2f:ef:17:91:7f:a4:59:eb:
c7:75:7e:b2:ca:cd:2b:ee:5b:11:c7:3f:5a:b6:77:
e5:c1:27:63:12:b3:23:0c:c2:3f:3c:5c:95:a9:22:
be:76:18:ab:b0:13:f2:18:0b:15:0d:f8:07:99:ce:
08:0f:e3:b9:48:0c:57:d3:59:2f:76:22:cc:17:75:
23:b6:6b:27:3f:c5:6b:6e:2d:ea:83:4c:b6:02:5f:
03:dd:cb:8a:7a:30:68:bb:33:ba:46:8c:ce:3c:e0:
95:85:73:00:f6:2c:bf:1f:ce:4e:32:57:f1:10:94:
d9:d7:a3:c8:1d:f3:e9:7f:f5:93:53:96:12:eb:2c:
2b:5e:2b:b5:82:6b:fa:9a:4c:12:01:fe:c7:16:94:
fb:07:d9:b4:fe:06:7f:01:69:01:21:8f:1b:2e:1d:
45:f5:0b:8a:09:ed:75:68:26:db:53:39:ef:af:82:
d0:d7:e5:a4:9b:51:16:03:3d:3f:81:80:7d:7c:70:
82:31:6d:3a:60:ce:34:ce:fd:d0:52:6e:25:9e:3f:
77:b9:15:bb:b3:4c:2f:58:ab:0e:9c:ea:51:c7:f0:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:AF:3F:97:64:0B:F5:CB:59:24:37:6E:31:E0:D7:20:08:34:57
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:c2:1e:94:79:64:28:f4:e1:c0:cf:d1:d8:83:43:e6:64:
ad:3f:df:3f:ae:87:41:67:bf:06:84:1a:5b:32:44:55:0d:07:
5b:b6:98:ce:e7:e1:d7:35:9f:b3:8e:b5:63:68:1e:ff:3e:0f:
b0:ba:e7:58:67:05:22:7a:d3:57:b1:ae:5a:eb:af:fa:45:f0:
4d:7c:56:cc:65:5b:b2:4a:31:cc:70:f4:42:9e:1d:2c:e8:00:
ce:6d:1f:15:0c:2b:0d:18:0b:4e:6f:62:72:90:41:c6:27:1d:
ed:6e:e5:58:45:b6:1f:aa:1c:bc:f0:46:96:d5:5b:a4:2c:f8:
62:63:5a:c3:f8:d9:de:53:94:8f:0a:71:36:5b:25:df:a0:dc:
83:2d:07:14:1a:cc:fc:6e:2e:a7:57:6d:be:68:1d:77:dd:fb:
5e:b2:cf:a9:34:a6:5c:e8:35:19:5c:0b:a4:0b:8c:60:3f:62:
54:9a:38:0f:79:df:17:ff:56:91:c4:ea:7e:3d:a6:bd:5b:f3:
8b:f4:a3:7d:c1:5a:0a:1c:06:e2:a9:9b:73:3c:c4:55:ff:21:
a6:75:93:a6:d0:bd:5c:1a:58:43:b6:a1:3e:5f:11:6b:0e:1d:
86:24:bf:45:0e:41:ad:95:9d:bb:82:be:a6:2b:41:e9:9e:22:
ff:bc:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:22 2025 by rpki-client