Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: FuXUs0Ti5ZYvwlrwbUC/vL72q/5RPvtf8oiBbuD4v8Y=
Subject key identifier: C3:0F:A0:D7:28:86:EC:4D:11:EC:FF:5D:6F:5E:61:E8:3F:7A:2E:96
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 01967530B7A5ED7861FD8A650ABEF4F6A9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 0812
Signing time: Sun 27 Apr 2025 03:00:49 +0000
Manifest this update: Sun 27 Apr 2025 03:00:49 +0000
Manifest next update: Mon 28 Apr 2025 03:00:49 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: gajv+Gj2Ya71Mst928A5UAjqGBpbhFXm8E7mNwmkPhU=)
2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:b7:a5:ed:78:61:fd:8a:65:0a:be:f4:f6:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Apr 27 03:00:49 2025 GMT
Not After : Apr 28 03:00:49 2025 GMT
Subject: CN=c30fa0d72886ec4d11ecff5d6f5e61e83f7a2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:5a:62:a8:84:9f:e8:b4:f5:0d:e1:0d:38:
e5:b5:9e:d9:02:57:a2:b4:05:61:ff:95:9e:65:3f:
b3:00:6b:ae:bf:64:74:2b:ba:e7:d9:c2:64:7a:c8:
56:e5:a0:83:5c:b0:6f:28:90:f1:dd:fe:9a:3a:00:
fc:8c:bf:1a:fa:33:99:0b:b4:c2:11:41:51:b4:e3:
1d:ae:12:ca:75:2b:70:e4:84:88:c4:96:21:30:62:
6a:9f:36:07:17:09:11:fe:9f:09:74:f9:cf:42:32:
1e:51:33:56:60:fa:e6:ac:34:00:5c:3c:83:b0:8d:
3b:a0:8e:f5:0a:c4:83:f7:be:f7:5d:97:21:8c:0b:
a9:b6:76:76:c1:d8:b6:29:12:35:8a:34:0b:46:49:
eb:b9:e8:65:0c:73:53:09:bb:da:18:3d:dd:3c:f8:
9d:3c:58:ed:8c:0b:64:9b:eb:c2:01:08:7c:7f:91:
a2:08:c1:51:ca:88:07:43:ec:2d:3f:94:a5:cf:e9:
1c:5e:de:10:5d:3b:a8:6a:bf:41:4c:76:d6:9a:fd:
d5:9b:b0:4a:f6:c4:d3:2f:12:f8:bf:5a:21:15:58:
54:43:03:95:38:b5:ab:9b:47:c7:6e:a1:4b:1d:6d:
ea:90:9b:bb:9c:35:b5:73:f9:6f:2f:3c:18:97:03:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:A0:D7:28:86:EC:4D:11:EC:FF:5D:6F:5E:61:E8:3F:7A:2E:96
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:7a:90:7b:14:c4:27:04:b2:e8:03:f1:83:b7:dd:45:71:
ca:08:2a:f6:06:92:44:fb:fb:21:9f:5f:20:77:92:3f:03:df:
ce:e6:73:f8:69:03:b6:0f:6f:a9:31:b0:ff:eb:52:10:4d:84:
07:d2:5e:20:3f:ee:ea:5c:8e:4b:5c:2b:26:f6:d0:c5:fa:c8:
7a:79:10:69:fb:33:6b:c7:de:d9:3a:19:a7:b2:c3:c7:5f:ff:
fc:44:01:26:dd:4c:85:88:2d:6c:7b:2c:c0:8d:90:78:77:0f:
fa:c8:45:da:df:08:b3:e6:ba:d2:41:1f:83:09:5f:3a:58:03:
35:54:57:37:16:66:90:ea:cb:07:69:3c:a8:b6:fa:af:a4:b6:
51:a4:f1:3e:8d:9a:92:9a:b2:8c:0d:fc:9a:f0:9b:8c:d1:91:
00:42:22:86:f0:76:f9:2a:2c:59:23:37:2d:5b:6a:df:a9:85:
32:df:a1:48:42:39:ef:7c:4d:6c:7a:c7:16:a8:06:82:b0:6d:
3a:52:4c:f0:d8:86:7a:43:49:09:70:a1:c8:30:db:a0:8c:51:
2c:52:60:b1:27:d5:50:04:94:0c:34:e9:02:e7:e7:c0:74:02:
02:df:ad:c5:5b:56:14:6d:4c:ff:3c:51:a2:6f:16:8e:1e:e8:
71:64:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:51 2025 by rpki-client