Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: 7hZj99SMb9WllBjgrIlXBa8LaPP0E3ZfEzQnmsyLqpc=
Subject key identifier: D1:7E:F8:FB:CD:F9:EF:C3:D8:28:A4:2E:ED:33:A5:AE:FC:4B:3B:B2
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 0196839105A94DC6336E2E8C0930440987C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 22:00:41 +0000
Manifest this update: Tue 29 Apr 2025 22:00:41 +0000
Manifest next update: Wed 30 Apr 2025 22:00:41 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: p1moBhr7mRVLDtm8vZE36GWHu6+M3Lw0AyFm0yoRV1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:05:a9:4d:c6:33:6e:2e:8c:09:30:44:09:87:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Apr 29 22:00:41 2025 GMT
Not After : Apr 30 22:00:41 2025 GMT
Subject: CN=d17ef8fbcdf9efc3d828a42eed33a5aefc4b3bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:0e:d3:c4:68:35:76:46:dd:00:26:bf:8d:
b0:c0:77:07:c6:eb:38:aa:a2:4b:19:24:a6:cd:ce:
45:4a:dc:ef:32:3a:45:77:fe:92:f6:19:df:54:f1:
82:37:24:50:71:5b:2e:13:3f:f6:aa:5f:08:68:7c:
2c:47:24:b5:13:67:0f:5d:14:b2:2c:91:46:b5:14:
a0:58:89:be:d7:03:84:ec:b4:13:9c:c0:39:b2:c3:
6e:90:f4:c0:46:5b:62:8c:77:e5:e4:42:3b:e5:34:
e5:62:47:d4:e6:a7:80:94:b1:6b:56:8b:13:82:d2:
fc:66:14:35:ff:17:2c:34:b0:95:1d:15:02:26:e4:
1b:81:a3:86:d5:1f:e4:e0:b9:c7:27:62:80:f2:c5:
c6:50:48:95:30:c1:52:7f:b3:1b:77:2d:be:0e:65:
d7:9a:db:e2:f1:12:9b:f2:bf:89:c9:c9:df:8a:9a:
18:bf:0f:28:28:12:9a:38:72:1c:3f:bc:16:62:0e:
2e:77:63:ab:a7:d0:32:45:d3:45:34:c1:0d:df:6f:
2a:62:8c:b9:3d:8b:c0:12:33:94:c4:97:06:b2:3f:
db:75:74:42:a5:f2:cd:95:3c:24:46:26:8a:36:58:
06:8e:6e:a2:f3:4a:10:96:19:89:c0:5d:d0:b2:f3:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:F8:FB:CD:F9:EF:C3:D8:28:A4:2E:ED:33:A5:AE:FC:4B:3B:B2
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:3f:06:f3:6b:fd:4a:bb:b4:74:a6:27:5a:01:20:a4:05:
0d:de:b4:97:ac:1c:00:4e:96:4b:75:8d:4b:04:cc:ef:58:4c:
9d:9a:e1:25:09:ec:04:f5:de:0a:4c:ce:2c:17:77:4d:31:b4:
0f:7b:8f:47:c5:4f:19:47:3e:bd:a2:34:d2:ee:ab:5c:10:61:
dd:bf:6e:b6:97:58:48:06:4f:86:98:79:fa:ce:a6:8e:5c:ae:
ba:85:01:d7:ec:1c:a6:62:98:34:60:cf:bc:51:7e:f8:72:15:
f8:21:02:46:78:39:80:3b:ea:fd:ce:38:30:a9:ca:ad:f2:81:
f6:e0:c3:99:d4:f6:8d:05:3d:22:a0:92:e5:73:61:3a:73:16:
b3:87:84:ab:bd:03:38:57:19:b0:b0:3e:cd:e6:46:90:6e:4b:
37:2e:57:d9:2f:83:f2:2e:e2:a9:65:df:e5:89:45:27:86:88:
56:59:6f:0e:07:72:fb:84:67:65:e8:50:c6:99:6f:2f:d8:c3:
f7:f1:fe:57:d9:68:c3:06:87:18:e8:b8:f8:54:7a:85:f2:6e:
64:e9:49:2c:dc:f2:ef:8e:eb:31:4f:24:b1:e3:86:bd:14:8b:
4a:0b:bf:5a:2c:59:19:e4:7b:9b:c0:03:ee:c3:6d:e3:b3:10:
9e:4f:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:36:15 2025 by rpki-client