Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: u5m/Qe6Jb4zZQX1y0BzPmUJZgj00KzlhCqL5n5pksWo=
Subject key identifier: 8E:B2:9D:2A:53:26:41:4C:7E:E5:1B:72:4B:71:40:B0:90:E9:7D:41
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019678D62879B5FB83E96542C1A9A535F49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 1311
Signing time: Sun 27 Apr 2025 20:00:23 +0000
Manifest this update: Sun 27 Apr 2025 20:00:23 +0000
Manifest next update: Mon 28 Apr 2025 20:00:23 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: S2F5J/cBRRn+USedXpdCwm2eOLGTuSpdF58E4fnqz9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:28:79:b5:fb:83:e9:65:42:c1:a9:a5:35:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Apr 27 20:00:23 2025 GMT
Not After : Apr 28 20:00:23 2025 GMT
Subject: CN=8eb29d2a5326414c7ee51b724b7140b090e97d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:94:fc:c9:d4:c5:5b:f4:98:43:0d:a5:40:
34:d4:7a:0a:a4:0a:15:66:65:60:32:dd:c5:97:a7:
3b:2e:83:11:72:ab:14:36:b6:42:08:fe:c5:be:b5:
98:af:0e:5b:6e:81:d0:43:d7:ef:8d:b0:e2:3f:e0:
9e:8b:d2:9e:34:9d:2f:d2:a0:01:08:c5:3d:8d:8e:
79:2a:7a:6b:b2:2d:a5:56:8b:27:9c:71:2c:a2:29:
cd:61:a1:b7:3d:20:73:32:0b:0f:2b:3e:68:69:b9:
5a:08:6e:f1:15:47:ff:29:b3:bd:95:7c:66:e6:c4:
19:14:af:a4:59:7f:1d:fd:e2:fc:e1:3b:ad:35:82:
d8:e2:37:dd:1b:12:ff:d4:c4:e3:cf:09:44:ed:46:
ef:42:9b:fa:08:59:a3:18:37:48:78:a7:e7:ca:6a:
ba:0c:52:15:9b:29:32:4d:91:8a:c2:3b:dd:fd:4b:
ac:26:96:40:85:f3:d3:89:c5:3e:9e:e3:b5:dd:2d:
63:35:14:b5:14:b6:ea:ae:34:dd:9b:2a:f0:34:88:
7b:5a:7e:f3:19:da:e3:42:d6:54:a4:12:2e:fe:83:
ba:f9:bc:76:17:b3:5f:79:6f:b2:3e:88:e5:9b:fb:
55:d5:13:bc:65:22:bb:8a:61:b9:10:8d:0e:99:0b:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:9D:2A:53:26:41:4C:7E:E5:1B:72:4B:71:40:B0:90:E9:7D:41
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:86:bc:77:f1:c6:3c:2e:47:7d:ad:b2:d3:61:32:b6:7f:5c:
0e:25:1d:71:09:62:9c:90:3a:26:7c:10:bc:98:c7:8d:22:6e:
58:6e:ec:de:2a:6a:e1:6a:87:84:bd:e0:e7:1e:d2:a3:ee:57:
0b:8f:54:bf:ca:2d:f6:4e:ee:71:d7:db:e5:d6:13:97:01:1a:
b0:3c:98:db:d9:94:2e:3e:49:60:df:ae:83:24:40:a6:63:c1:
02:fb:c4:4a:72:b4:00:e6:6f:2e:97:8f:d6:8e:3b:40:c6:ad:
ee:35:5b:05:3b:6d:fc:d7:2b:8a:41:c8:62:52:1e:c9:91:55:
76:92:14:46:11:f4:09:73:82:05:d6:2b:90:70:be:c1:82:a5:
08:2f:16:d9:28:11:cf:7f:1a:b3:83:a1:8d:36:50:19:5e:e9:
b6:cf:6e:03:c5:4e:5e:3b:21:58:e0:5b:5a:cf:d3:67:ff:2e:
ad:45:ce:88:2f:63:d2:3c:5b:1c:a3:a9:1a:00:a5:7f:0c:be:
8d:8d:17:68:14:23:0b:01:73:b4:70:e2:21:7e:b5:b6:1d:f4:
0c:2d:37:a9:5c:16:e0:bf:e7:79:c0:ae:c6:be:79:01:21:0b:
cc:02:7a:f9:4c:b4:1f:46:6c:8a:dc:ce:91:0e:c1:cf:f7:17:
11:d2:37:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41ih5tfuD6WVCwamlNfSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUwNDI3MjAwMDIzWhcNMjUwNDI4MjAwMDIzWjAzMTEwLwYDVQQD
Eyg4ZWIyOWQyYTUzMjY0MTRjN2VlNTFiNzI0YjcxNDBiMDkwZTk3ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy02U/MnUxVv0mEMNpUA01HoKpAoV
ZmVgMt3Fl6c7LoMRcqsUNrZCCP7FvrWYrw5bboHQQ9fvjbDiP+Cei9KeNJ0v0qAB
CMU9jY55Knprsi2lVosnnHEsoinNYaG3PSBzMgsPKz5oablaCG7xFUf/KbO9lXxm
5sQZFK+kWX8d/eL84TutNYLY4jfdGxL/1MTjzwlE7UbvQpv6CFmjGDdIeKfnymq6
DFIVmykyTZGKwjvd/UusJpZAhfPTicU+nuO13S1jNRS1FLbqrjTdmyrwNIh7Wn7z
GdrjQtZUpBIu/oO6+bx2F7NfeW+yPojlm/tV1RO8ZSK7imG5EI0OmQsP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ynSpTJkFMfuUbcktxQLCQ6X1BMB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIa8d/HG
PC5Hfa2y02Eytn9cDiUdcQlinJA6JnwQvJjHjSJuWG7s3ipq4WqHhL3g5x7So+5X
C49Uv8ot9k7ucdfb5dYTlwEasDyY29mULj5JYN+ugyRApmPBAvvESnK0AOZvLpeP
1o47QMat7jVbBTtt/NcrikHIYlIeyZFVdpIURhH0CXOCBdYrkHC+wYKlCC8W2SgR
z38as4OhjTZQGV7pts9uA8VOXjshWOBbWs/TZ/8urUXOiC9j0jxbHKOpGgClfwy+
jY0XaBQjCwFztHDiIX61th30DC03qVwW4L/necCuxr55ASELzAJ6+Uy0H0ZsitzO
kQ7Bz/cXEdI3Yw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:34 2025 by rpki-client