Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: 9YQ2Clkg9MJyZEDgsUe8E39HmaFBqQLOFBmqQzpPOvs=
Subject key identifier: FD:82:53:E9:88:EB:0E:7E:22:49:85:EF:47:66:C8:D8:D9:A2:09:D6
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 019674F975B8974194C4C7BDC4CB2E0E6DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 017F
Signing time: Sun 27 Apr 2025 02:00:27 +0000
Manifest this update: Sun 27 Apr 2025 02:00:27 +0000
Manifest next update: Mon 28 Apr 2025 02:00:27 +0000
Files and hashes: 1: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: H4afRnJsCTtQEa+617EFTZ0QQ+g/QvGJDyHFPCGlHDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:75:b8:97:41:94:c4:c7:bd:c4:cb:2e:0e:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Apr 27 02:00:27 2025 GMT
Not After : Apr 28 02:00:27 2025 GMT
Subject: CN=fd8253e988eb0e7e224985ef4766c8d8d9a209d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:41:7b:34:e0:eb:61:58:34:8b:b5:e2:45:
7e:bb:7f:93:45:ec:d2:79:04:9b:5c:7d:14:cf:5d:
55:34:06:11:96:16:9a:6c:1e:e2:30:48:f4:e7:2a:
dd:c3:dc:a1:9a:c9:e2:65:56:8a:e8:dc:41:5a:bd:
ed:bb:84:11:0f:41:74:70:fb:80:8a:6a:fb:47:dc:
30:74:e2:92:97:62:58:2f:fc:5c:fa:d2:cf:90:df:
08:1d:69:c2:ca:a3:92:5d:6b:2c:9f:5f:b3:2d:7a:
b8:37:80:75:93:34:07:5d:5f:a1:c3:4e:c8:90:61:
29:ae:ea:11:78:76:eb:58:2b:c1:5f:bb:13:f8:b7:
67:08:b0:07:12:ad:63:e5:16:b3:e0:2b:be:5e:99:
d6:1a:e6:ce:d3:36:ac:37:77:56:96:2c:10:9d:16:
95:4c:42:b5:42:ef:63:65:03:0d:ae:62:f3:2a:f0:
95:63:ff:13:0f:cd:d5:7c:25:ac:7c:ad:f5:e7:e5:
1e:22:c9:b5:55:fa:23:ae:65:03:87:b4:86:76:b4:
a4:33:65:fc:e9:c5:79:39:ff:ef:ce:c4:79:25:7c:
dc:b1:73:14:46:07:8c:56:bc:1d:9a:84:02:93:fe:
6e:27:76:c5:4e:c3:75:d9:86:52:44:2c:79:15:63:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:53:E9:88:EB:0E:7E:22:49:85:EF:47:66:C8:D8:D9:A2:09:D6
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f9:50:82:08:0a:e0:85:49:8c:dd:57:f8:ef:6e:ac:60:77:
53:06:b8:09:30:1d:00:95:87:57:66:35:7b:23:4a:19:85:6b:
bd:bf:b7:e8:21:d2:77:e9:89:8b:4e:99:28:cd:73:96:2c:c2:
73:9d:3b:68:6f:74:0c:50:3d:a8:a8:56:39:98:a6:2a:16:74:
6c:52:e1:31:12:51:99:4b:ce:76:97:b8:6b:4c:d5:93:c5:95:
09:0e:a6:6a:1f:a0:d2:e7:1b:33:50:a8:98:0e:bc:c3:29:be:
e4:ed:54:28:b7:f8:f1:b9:60:0d:2c:dd:e4:52:c4:a9:71:96:
9f:89:b4:8c:f7:59:88:84:0a:20:39:a3:5e:60:cb:b9:a6:f8:
21:0b:c9:cc:b5:d4:43:96:e5:89:63:7b:a2:44:03:94:42:b5:
de:11:3c:0f:35:b0:e3:d0:c0:2c:f0:09:4a:e7:fd:9c:0d:e0:
b5:92:8a:85:88:d2:13:6b:2c:cc:34:3c:9d:4c:11:1c:78:59:
a1:06:44:72:76:7b:10:31:2e:2d:18:df:fb:cd:b4:b4:0e:ef:
1f:8f:54:b8:4e:fe:1e:16:e5:19:65:41:00:19:2a:4f:50:28:
90:89:59:19:dd:5d:5d:2a:77:81:ea:52:2a:67:13:79:c8:0c:
7e:8f:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:41:30 2025 by rpki-client