Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: JgPgTdz/kIFKvVX3tZ/amX1a2bW8MHHCBtBU+Q3B+N4=
Subject key identifier: 59:25:19:96:EB:D1:AB:CC:7A:9B:91:4D:FE:1F:F9:FD:FB:AB:3A:9E
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0196395281199A96D567DFC8F57D4CBDACC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 0E1E
Signing time: Tue 15 Apr 2025 12:00:30 +0000
Manifest this update: Tue 15 Apr 2025 12:00:30 +0000
Manifest next update: Wed 16 Apr 2025 12:00:30 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: m7T3hR9MAyZ6jTdqXQm3hrwKF8oCQRI7WAPPiGZgk9c=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:52:81:19:9a:96:d5:67:df:c8:f5:7d:4c:bd:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Apr 15 12:00:30 2025 GMT
Not After : Apr 16 12:00:30 2025 GMT
Subject: CN=59251996ebd1abcc7a9b914dfe1ff9fdfbab3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:eb:26:c2:8d:31:bf:1a:e9:c9:1d:cd:f8:
e8:59:6c:75:0a:15:04:a0:ba:25:33:49:d0:f8:d8:
b0:7e:0d:73:45:41:ba:32:5e:99:d1:d3:b1:b6:f3:
fc:c5:0a:e4:5c:1a:4f:8b:b0:1d:f9:98:e3:60:fe:
14:04:fe:10:82:a5:eb:d9:70:71:c3:f9:7c:0a:96:
f4:21:4b:1a:df:fa:9d:fc:21:50:a9:15:d0:93:af:
b0:01:99:c9:35:90:af:e0:51:51:75:51:0d:24:82:
cf:e4:9a:c3:57:e8:6f:04:64:6a:8c:1c:f0:22:31:
00:ce:91:1a:8c:5f:ca:c3:a0:cc:28:02:98:12:12:
d0:6e:5e:b9:76:6d:40:76:96:e1:bf:83:55:6f:cb:
5b:14:2e:24:90:98:05:fe:f2:63:e5:c7:ad:79:67:
1e:93:01:8d:ce:f2:a0:c9:b6:14:01:11:fa:94:0e:
ae:4f:5c:e8:0b:8b:75:05:4d:ac:f6:ff:d7:98:a1:
43:91:3a:15:3e:ca:59:78:20:d2:1c:3c:5e:a6:29:
c8:c9:81:28:55:41:d6:1a:cf:7d:bd:d9:91:c8:8e:
cc:a7:04:0c:cb:28:be:e0:01:81:53:f2:d7:c1:92:
f2:1b:91:3e:6a:3f:6b:10:6b:07:4b:0e:35:ad:e3:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:19:96:EB:D1:AB:CC:7A:9B:91:4D:FE:1F:F9:FD:FB:AB:3A:9E
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6c:8a:d3:0a:74:bd:c7:35:ca:a1:5f:74:ce:bf:85:39:b1:
13:0f:ba:f8:e3:45:0d:17:64:0a:d7:4d:a1:5f:d0:96:be:65:
b0:e5:4f:84:d2:81:97:fc:79:72:c3:25:71:47:a0:72:49:d2:
3c:35:43:9c:4f:f0:cc:78:23:86:16:57:db:c1:21:ab:cc:91:
3c:01:8d:0c:6d:44:f3:9c:14:4d:6c:68:4f:33:fa:94:26:6b:
9d:40:b5:13:d6:f2:04:87:f2:a4:bf:83:12:4e:61:f1:79:8a:
b7:07:8b:a9:4c:04:0b:82:50:c1:3a:0b:e0:98:04:9e:6e:90:
4a:1f:d6:81:10:7f:ae:d2:df:78:62:25:34:d8:8b:6d:71:a1:
64:19:91:99:96:53:65:5a:70:b3:82:cb:06:3c:08:72:b6:43:
6e:15:0c:9a:d3:39:af:07:51:60:db:55:7c:dd:ff:c0:f5:b6:
10:0f:bf:0c:2b:f9:82:14:ce:72:10:38:16:68:43:7c:58:4f:
b1:b1:58:43:29:23:b0:bd:12:5c:7d:2a:29:72:ad:51:62:a6:
92:5e:fa:ae:69:ab:b1:87:12:c6:b7:d0:43:5b:ca:c4:d0:83:
0c:53:f3:86:18:3c:72:0d:10:a1:ca:13:98:4c:0a:e9:50:fe:
d5:6b:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:10:03 2025 by rpki-client