Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: /i9nsfSK9KQc187pavPYL+2D55RvVPYNEV6bmXNwoxo=
Subject key identifier: 78:D5:F8:85:48:42:50:44:8A:13:B9:C8:04:92:5A:84:A5:45:DD:E2
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 01967DC610B1BE892E8EC84DF523FC15D707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 0EC0
Signing time: Mon 28 Apr 2025 19:00:54 +0000
Manifest this update: Mon 28 Apr 2025 19:00:54 +0000
Manifest next update: Tue 29 Apr 2025 19:00:54 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: iTg5NjWWiNpe3YyqXzWRhDWjouRIwaYvVXUIIxgQ3FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:10:b1:be:89:2e:8e:c8:4d:f5:23:fc:15:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Apr 28 19:00:54 2025 GMT
Not After : Apr 29 19:00:54 2025 GMT
Subject: CN=78d5f885484250448a13b9c804925a84a545dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:bd:76:e1:62:2e:b5:71:6e:2f:dd:46:35:
b3:f0:46:c7:16:63:fb:3d:e7:71:a2:29:e9:72:2d:
e5:af:f0:86:68:95:40:8e:a0:c2:57:25:70:6f:a4:
65:46:a2:3a:f2:a0:d7:09:de:6f:88:69:42:35:04:
c0:75:c5:7e:a4:14:66:16:24:10:d0:01:df:8f:12:
3a:07:a2:96:4c:0c:23:93:4b:ae:21:d9:7d:49:e7:
a3:c1:11:3f:fc:0e:a5:52:d0:b2:d5:4e:a6:5f:3d:
04:4c:51:cb:f6:26:3f:13:49:c9:9a:65:18:d5:e9:
98:2d:d2:4a:ba:5f:eb:5b:c9:96:38:a5:3f:45:dc:
cc:4c:d6:9c:98:4d:a3:e3:02:83:80:6a:47:71:9c:
72:08:33:5a:5a:6d:70:55:35:63:44:be:fb:f3:06:
26:d9:34:fb:25:24:f6:ec:2a:6b:82:0d:d5:b2:f4:
2b:1b:eb:7c:98:76:15:ab:e1:a3:75:e7:02:b2:2d:
fe:b0:a6:63:1d:55:4e:b1:37:8b:a7:55:af:cd:1f:
de:74:9f:b0:25:37:d1:23:34:de:4b:1d:8a:fc:a5:
7f:56:4b:9c:31:2d:a4:60:85:f7:be:5f:ea:c0:ec:
db:31:71:34:e1:5b:13:47:a2:a5:12:ce:1f:20:e9:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:F8:85:48:42:50:44:8A:13:B9:C8:04:92:5A:84:A5:45:DD:E2
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b8:6f:1e:47:cc:a5:f9:23:f3:7b:31:df:05:76:65:4e:fc:
b1:02:69:ce:9b:85:6d:2a:e0:91:61:fa:7a:96:c4:cf:8a:98:
a5:9b:05:62:6a:36:4d:87:a8:99:28:43:67:29:6c:bc:c7:6f:
bf:5b:80:7c:ab:e9:4a:ce:91:48:b6:55:9d:38:7e:b5:a4:e6:
9c:24:3d:97:43:52:df:ff:c8:04:87:cf:79:cf:eb:d7:d1:1e:
9a:42:ef:5a:d9:e0:d5:dc:12:76:66:dc:6d:79:60:cf:76:f0:
3f:d1:35:4c:b3:6e:b1:20:a7:31:6d:2f:fc:08:3d:70:5e:7d:
78:a4:cc:31:01:10:8c:10:23:2c:1b:4b:a0:12:15:b0:bc:76:
55:f3:0b:01:26:62:1a:f7:41:4c:47:61:8d:37:90:f8:4d:8f:
13:a6:15:e6:c4:a6:ce:44:63:99:e9:1c:03:7f:47:5b:29:fa:
ec:af:f2:2a:fb:41:82:b8:52:aa:49:25:9a:16:56:e2:e0:da:
4b:33:cd:6b:88:67:94:e6:ca:94:17:f2:68:b3:d8:64:09:dc:
b2:a1:7e:1c:37:22:7f:01:64:42:e1:69:01:d7:8b:5c:ed:b4:
f1:26:cf:ea:3e:fc:6d:fe:d5:aa:56:cb:ba:f5:47:4a:04:e7:
61:3e:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:00:57 2025 by rpki-client