Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: AdI5xB8jQtrz9drfB0bbrbyjMSCfsQq13Dg85qTbRxA=
Subject key identifier: 2F:A4:CB:9A:AA:10:E3:8C:D5:A3:34:2B:EC:5F:05:65:43:F0:6D:A4
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019643686B050FC5231F45ABF0D529CD93D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 152F
Signing time: Thu 17 Apr 2025 11:00:38 +0000
Manifest this update: Thu 17 Apr 2025 11:00:38 +0000
Manifest next update: Fri 18 Apr 2025 11:00:38 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: EG7YLOMq5tuh7jwkk5ljxNNXZ1f+dS9gInnVvdCtmrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:6b:05:0f:c5:23:1f:45:ab:f0:d5:29:cd:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Apr 17 11:00:38 2025 GMT
Not After : Apr 18 11:00:38 2025 GMT
Subject: CN=2fa4cb9aaa10e38cd5a3342bec5f056543f06da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:6e:77:d9:60:1b:cf:0a:f7:26:49:2c:b3:
ea:a3:80:af:6b:b8:5c:e4:b8:98:ac:d8:9c:ed:ea:
67:48:39:64:04:29:79:8c:b7:8e:6f:87:c0:6f:ce:
b1:bb:df:fa:c1:bf:3c:fc:72:8d:7d:07:b4:0e:4e:
d7:7d:fd:79:b7:9f:1e:38:c8:d4:c9:35:7f:a6:d8:
82:36:7c:be:a6:46:14:75:26:07:1a:b4:38:34:4a:
c0:f4:84:5c:dd:ca:7d:9a:c7:7c:80:37:7a:48:60:
61:32:f3:e9:ac:b5:bb:ce:5c:d1:10:48:00:af:16:
30:1c:2f:e5:b2:bd:1f:dc:76:d7:5f:bb:b1:d0:ec:
5d:78:9f:81:fe:7c:98:df:0d:e8:a1:e9:c0:6f:b6:
55:14:4d:ee:a3:2e:80:be:8f:52:dc:21:77:a6:45:
4e:5d:86:47:69:43:a9:3a:69:3e:51:ea:0a:04:d0:
91:ae:66:58:19:2a:b7:71:85:02:a2:6d:1f:b8:e5:
bf:0b:a8:6e:51:a2:41:fb:1c:6f:4b:16:42:51:06:
e4:14:cd:95:dd:76:b0:3d:c3:55:62:57:24:b0:d2:
96:e6:ce:ce:af:35:31:25:2d:77:aa:9a:24:79:52:
b3:50:b8:d1:63:7c:07:a6:37:ea:9b:84:d0:45:29:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:CB:9A:AA:10:E3:8C:D5:A3:34:2B:EC:5F:05:65:43:F0:6D:A4
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:2d:f6:e1:cd:c4:26:4e:9a:9c:5f:0b:5e:16:76:6b:ca:
a9:a2:dd:3a:47:73:41:63:8f:6f:17:c6:ad:f8:85:1e:2e:ac:
4b:08:96:d3:d7:99:39:b6:38:f5:ff:f4:3b:06:d8:1d:3b:a3:
a3:61:e1:72:c6:5d:5c:65:72:b9:1c:07:49:e8:3f:63:af:14:
d9:1f:66:75:dd:32:53:f2:7f:f4:e7:e0:24:b1:a6:5b:2f:f1:
25:eb:81:4a:1d:d6:4f:43:cd:81:4c:89:3a:13:8f:d8:7e:c7:
0b:a4:5a:f5:82:fb:27:49:4e:e7:2b:9d:8c:90:52:1f:4d:bb:
04:4f:1c:9c:e5:2d:4e:4f:8d:4a:34:1e:ca:03:af:a7:95:5c:
49:28:c9:02:f2:5d:58:7c:7f:d9:0f:e1:35:78:46:e1:80:7b:
3e:63:8e:a8:fd:92:ae:67:85:4f:8b:33:61:5c:ae:9b:66:7c:
6e:f9:63:ca:72:40:9a:d2:79:92:6b:c5:a3:e7:72:5c:ad:98:
f5:6e:8b:83:bf:3c:1f:d1:b6:57:78:d3:21:4e:fb:bf:f1:94:
31:10:c8:37:5f:d0:4e:8d:51:da:12:e0:66:01:22:78:59:3f:
c5:ab:fe:16:23:65:17:c4:30:91:53:bf:a9:47:c0:99:0b:c8:
39:1c:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:25:40 2025 by rpki-client