Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: NJjHsw0wsK5EbTOLRtJQWMACK0n7nNCy1AWNl+duMSk=
Subject key identifier: 6E:C3:B1:4B:85:43:28:79:74:8D:27:63:32:67:85:B3:F6:EC:48:1E
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01965982158A5E1AC200837C7AF3EB5D7BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 18:00:19 +0000
Manifest this update: Mon 21 Apr 2025 18:00:19 +0000
Manifest next update: Tue 22 Apr 2025 18:00:19 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: zqfTlp/DNdUteyHR3+olPTmmrUAWv310DlTIcLcl28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:15:8a:5e:1a:c2:00:83:7c:7a:f3:eb:5d:7b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Apr 21 18:00:19 2025 GMT
Not After : Apr 22 18:00:19 2025 GMT
Subject: CN=6ec3b14b85432879748d2763326785b3f6ec481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:b3:55:b0:74:7b:5b:34:b1:23:d9:20:b4:
a8:17:6c:6d:a9:93:fd:4c:ac:74:bc:02:42:47:f4:
34:ca:34:2f:63:05:d8:9f:fe:4f:e6:35:66:13:b1:
78:86:02:ea:66:e5:29:65:60:8b:69:e8:e4:67:7e:
5e:e1:13:79:90:c1:bc:68:3a:9a:75:4a:2f:0d:e7:
29:5e:a2:25:2f:e7:6f:38:0f:d3:36:27:c2:7c:73:
10:fe:23:67:a6:31:e6:45:03:f6:e9:ab:41:97:9a:
bc:d8:78:9c:6e:03:1e:86:c3:1c:1c:5f:25:fd:88:
32:de:d5:90:f4:d9:26:34:f9:bc:92:64:9f:fc:f8:
83:31:48:9f:d4:12:b8:e3:9c:de:3c:5d:bc:64:9a:
dd:4a:4f:6e:0f:c0:ec:21:b8:20:46:23:9b:97:1b:
85:b8:7f:d3:01:b0:2d:3d:ff:a5:de:4f:25:df:a7:
1b:7c:6b:d2:47:03:3a:1a:05:80:82:80:b0:58:3e:
26:47:36:86:db:0f:21:a7:7d:ec:dc:28:41:b5:9f:
66:a0:4c:49:04:de:6a:00:64:ad:47:18:5c:7b:07:
27:10:fd:a4:da:8b:e6:0d:94:b0:7e:28:2d:17:f8:
ec:9f:de:41:4f:41:be:b6:2c:4a:09:9f:e4:c5:8a:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C3:B1:4B:85:43:28:79:74:8D:27:63:32:67:85:B3:F6:EC:48:1E
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:d5:b6:df:48:6a:64:05:cb:b3:a3:58:02:8b:6c:f8:72:
34:cb:9b:03:a4:11:15:a2:7c:71:c8:b4:d8:85:0e:04:36:9e:
e8:19:76:44:94:02:19:c9:da:d1:e1:36:47:a8:82:7e:63:b4:
c2:ed:e6:07:e5:d3:cf:78:90:61:8e:56:02:89:23:e5:83:25:
16:d8:1f:fd:91:e3:4f:7c:a7:23:86:53:1e:f1:89:05:3a:7c:
f1:e9:53:3c:fe:83:a7:25:a4:8a:f1:9c:61:13:f7:41:fc:c1:
51:9d:1d:14:3a:e9:26:59:c9:37:d6:66:bb:36:17:1c:41:e2:
16:d5:e5:c4:54:81:ae:3b:5f:72:f1:61:36:83:93:46:c7:82:
8a:97:0a:83:68:50:32:fd:49:72:4b:cd:b5:8c:49:61:b4:78:
df:48:09:0d:19:f8:dc:2a:02:54:f5:6b:2e:37:6d:77:c7:43:
6c:df:82:58:62:45:08:19:5c:5d:9c:e6:53:b3:81:79:6f:0c:
0f:db:70:77:da:e8:8d:37:54:ab:f8:6d:be:b5:64:6d:0f:5c:
b9:3f:42:00:26:10:94:80:54:36:85:f8:18:c6:8b:94:39:a4:
78:0d:0a:99:3f:11:e6:50:79:34:8a:66:ad:c9:10:3f:14:04:
d1:3d:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:49 2025 by rpki-client