Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: UW3dLS5NVNkAIA1BehQAal9MvF+xXEKWDy/dyv2eqQU=
Subject key identifier: FB:10:EC:DF:D4:D8:27:90:FA:F1:31:4C:13:FB:0B:32:06:E2:7B:C2
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019638E4E6F91D2D3BCD8CD1B3606A25E6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 146F
Signing time: Tue 15 Apr 2025 10:00:47 +0000
Manifest this update: Tue 15 Apr 2025 10:00:47 +0000
Manifest next update: Wed 16 Apr 2025 10:00:47 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: p/zQ5Y8nqm7T70x3QpyoM8CAm7/7nlo2I9u2SlaeQpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:e6:f9:1d:2d:3b:cd:8c:d1:b3:60:6a:25:e6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Apr 15 10:00:47 2025 GMT
Not After : Apr 16 10:00:47 2025 GMT
Subject: CN=fb10ecdfd4d82790faf1314c13fb0b3206e27bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:60:06:6c:4b:58:f4:79:5f:2b:43:1f:e7:
af:f5:da:af:92:c3:43:58:e9:b2:27:65:ee:96:46:
7c:58:a7:0e:76:e3:48:04:46:5b:7d:fb:ae:60:3b:
58:d9:40:3d:45:31:d0:cd:62:33:96:c9:5a:4c:15:
27:62:c1:0c:2b:77:8e:2f:be:07:7a:28:b7:1b:78:
10:b1:18:ed:c4:1b:7b:e9:83:41:bb:ab:89:d4:77:
90:65:46:45:d1:fa:9b:13:03:5a:07:62:96:38:24:
cc:64:bc:13:08:6e:cc:ba:4a:29:2e:3a:e5:56:6e:
96:33:8e:6b:be:e9:7c:a9:36:7c:cf:48:d7:f2:cc:
be:a6:d6:83:90:17:d7:10:44:72:a6:df:ef:16:3c:
50:ad:e6:ca:89:a6:9c:53:57:05:7e:d3:86:b8:0d:
33:c9:85:01:27:64:b0:c8:5d:f8:5e:c8:6f:32:d2:
3e:d8:33:b2:db:10:25:d1:25:91:88:d7:74:0d:de:
e8:b9:dc:e7:14:b1:40:3d:51:88:03:d0:f2:6d:1d:
26:86:42:6e:0d:f0:3a:26:9d:8e:77:c5:56:8c:9c:
37:6e:e8:26:04:22:e8:96:7e:8a:12:e4:b5:af:7f:
a0:11:5c:71:a3:73:77:66:fc:f9:d0:5f:df:fc:62:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:EC:DF:D4:D8:27:90:FA:F1:31:4C:13:FB:0B:32:06:E2:7B:C2
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:db:06:a6:9b:46:b2:6a:c9:f3:c7:16:bc:42:aa:d6:2a:
a6:dd:27:38:e1:b2:23:13:5b:0d:55:fd:b2:b2:17:17:e7:31:
71:c2:54:3e:04:17:44:d1:f5:48:24:b6:67:44:18:5b:7c:e5:
71:dd:5e:fe:69:4f:ee:7b:0d:d4:22:16:0a:ce:ae:88:0d:02:
c8:93:f8:72:83:94:fa:a6:08:05:3e:8d:91:e4:24:8b:ba:d6:
a9:0f:10:54:1e:25:ab:27:eb:e7:36:1f:d9:5d:25:e9:5d:8a:
f4:ff:e7:6c:6f:44:de:4c:17:5e:32:bb:b8:13:3d:3f:09:d9:
34:f0:5b:61:ad:84:1f:b3:85:42:24:c8:6e:a3:3c:ed:1f:a6:
eb:6d:8c:e4:31:56:7a:f0:39:0f:56:36:d1:a6:24:87:6b:9c:
0a:13:ec:7f:8b:62:64:7c:94:12:b5:4b:f9:26:c2:24:9b:d9:
42:0f:ae:ba:45:01:4e:e9:31:bc:ed:5b:90:4d:0c:06:44:f0:
20:46:ae:65:a0:77:38:f8:cb:c1:e6:d1:54:25:37:7a:01:3c:
62:26:13:f5:2a:b4:75:98:7d:46:0d:c0:00:d6:57:8b:e0:41:
91:c2:70:60:47:89:f8:08:ab:fa:4f:1a:10:74:39:7c:8b:81:
a2:62:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:35:04 2025 by rpki-client