Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: XDNV5HzgTmEBt96SPiIUaOS8JzTasjeb10RvZhJlpc8=
Subject key identifier: 30:61:36:4F:D8:72:5E:29:E2:80:B8:94:16:20:41:82:9E:FE:CE:D7
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 0196797B77471C60ADFEDA9F704FBAE60D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 23:00:56 +0000
Manifest this update: Sun 27 Apr 2025 23:00:56 +0000
Manifest next update: Mon 28 Apr 2025 23:00:56 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: JSu7DEPUbZ657E1xtlLBcAGLp/1gptmPk27FpnCMl0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:77:47:1c:60:ad:fe:da:9f:70:4f:ba:e6:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Apr 27 23:00:56 2025 GMT
Not After : Apr 28 23:00:56 2025 GMT
Subject: CN=3061364fd8725e29e280b894162041829efeced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:6c:c1:d3:2f:91:14:94:b9:4b:b8:9b:8f:
63:69:1b:cf:90:cb:3c:d3:48:13:29:1b:75:c2:da:
c1:1a:bd:0c:db:6f:37:40:f0:55:66:d2:11:90:60:
25:7c:c3:ac:06:02:7e:1a:b1:15:5f:42:05:a6:40:
0f:77:bb:6b:aa:05:53:75:04:6d:a3:1b:5f:d2:ff:
79:f8:e5:5a:02:b2:69:ae:1d:cf:0e:da:0d:9b:2a:
7d:df:09:41:35:1a:2e:58:5f:cd:c0:a1:e8:c5:8c:
08:db:9e:00:86:6e:b2:21:7e:5f:fd:f8:f8:81:b5:
fc:fa:32:37:20:47:1c:0d:9b:e4:ff:33:65:a0:93:
13:6e:c3:0e:67:98:68:b9:ff:e6:6b:a2:97:a2:b4:
90:77:88:e5:65:df:83:7a:c3:99:20:a8:cd:e4:6c:
35:38:de:00:5c:a9:81:d6:7a:72:c1:5d:ba:d0:0a:
54:d9:bc:90:f3:8f:8d:9c:b1:c4:36:f5:42:c0:11:
37:44:b9:dd:76:72:1e:6c:3b:25:0f:c0:0a:28:4c:
b6:43:6a:81:69:0a:74:1c:64:02:b0:5f:cb:20:44:
6d:fd:d3:89:17:07:08:b1:e7:61:39:ed:eb:4f:de:
3b:06:fe:ce:7a:40:90:a8:bd:c1:2b:86:bb:b0:12:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:36:4F:D8:72:5E:29:E2:80:B8:94:16:20:41:82:9E:FE:CE:D7
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:dd:30:69:49:69:2b:d2:01:9d:69:e8:28:e5:77:a2:fe:
5c:5e:c5:51:78:46:35:b7:1b:16:9c:55:3e:e3:cf:2f:35:ce:
1d:8e:d9:11:e3:ef:e2:ce:41:f5:02:5c:15:ad:e8:0d:b9:0a:
14:16:36:3b:44:8b:14:51:5a:da:a2:5b:0f:75:04:0b:dc:46:
4e:09:98:89:8d:b4:08:c3:9c:03:9b:7d:a6:a9:98:cb:f8:a1:
5a:28:10:ac:2f:72:83:43:ce:76:83:87:80:38:26:01:14:08:
51:7e:5c:a7:e8:64:76:28:e8:bf:49:e5:a8:c8:84:f3:f8:9e:
33:10:64:86:c0:8d:e5:86:e6:4b:47:77:55:3b:7a:86:c5:a7:
2e:96:1f:c9:52:49:04:8d:de:f6:11:08:c2:5c:5b:6e:e7:90:
18:11:b8:96:6c:e9:be:7e:8d:7f:a2:8f:20:7a:1d:c1:3d:cc:
58:33:b1:18:40:ca:2d:41:2a:c1:f7:09:fd:9e:21:da:dd:20:
ac:bc:cd:8c:a4:62:0c:d8:a6:93:f0:97:2f:4b:7b:fd:a0:a8:
ab:84:ec:b5:ce:68:39:03:34:75:a1:9d:cf:6d:18:5b:58:c1:
80:1a:de:3f:89:bd:1a:86:fc:fb:90:cb:e5:33:06:d7:68:8c:
fb:46:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:10:25 2025 by rpki-client