Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: 21gcm2V/8leUDoOkq0228qtT1wFop4V7/F/6anDb2Is=
Subject key identifier: F4:46:79:DD:3D:7A:D1:15:DA:2F:D5:30:CE:6F:36:81:C1:FC:BC:D8
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 01967567B379CCE78DDD7E8421A6BB36A90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 08D3
Signing time: Sun 27 Apr 2025 04:00:52 +0000
Manifest this update: Sun 27 Apr 2025 04:00:52 +0000
Manifest next update: Mon 28 Apr 2025 04:00:52 +0000
Files and hashes: 1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: RCvaS8ODP3yRqNcMOnnTFIku0rhZNTuonrVdnDMxEP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b3:79:cc:e7:8d:dd:7e:84:21:a6:bb:36:a9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Apr 27 04:00:52 2025 GMT
Not After : Apr 28 04:00:52 2025 GMT
Subject: CN=f44679dd3d7ad115da2fd530ce6f3681c1fcbcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:43:8e:30:bb:92:6c:4a:1a:df:bb:16:79:
c6:80:35:94:bc:d2:6d:e8:49:8e:8c:cd:44:23:43:
50:9c:68:ad:fb:74:de:6d:57:30:79:2a:5b:71:75:
64:fd:99:c6:69:90:7c:cd:63:82:37:32:f2:5b:c8:
01:a4:ee:48:0c:c1:2b:95:89:0f:cc:60:ac:d9:55:
71:33:ab:e3:8a:9b:59:90:2b:93:15:2b:87:16:5c:
2c:7c:53:44:d0:f0:61:65:61:94:83:cd:04:4f:d4:
a9:82:60:11:51:aa:26:e1:37:31:fb:ab:04:8b:a5:
0b:3c:41:04:c7:0c:9e:02:dc:ad:71:6a:1f:ee:77:
04:aa:6f:64:c7:a3:d2:a1:c0:73:11:28:2b:2a:42:
f9:03:5e:fc:a7:6b:fe:b4:8e:d3:91:a0:fd:36:bb:
2d:84:d3:2a:d8:9e:20:d5:ef:f2:03:e1:e5:67:88:
64:1c:9d:d2:fc:72:66:5b:09:68:36:86:81:0a:dc:
50:4c:91:6c:6f:5e:e7:55:e7:df:9a:44:29:71:81:
30:b6:d5:af:1b:16:e9:61:c4:a3:a4:da:99:08:a6:
7b:23:b2:50:b5:26:b9:22:8d:ca:7e:9c:58:3c:aa:
f3:57:a9:37:45:1e:9c:04:2b:5c:c5:46:73:f1:aa:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:79:DD:3D:7A:D1:15:DA:2F:D5:30:CE:6F:36:81:C1:FC:BC:D8
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:0c:30:5f:ce:e8:21:7b:79:be:74:7a:4e:19:c3:ca:5b:
85:d7:7f:1f:c5:fb:95:e4:a6:2a:f4:15:03:0b:3f:17:35:25:
9d:ef:39:72:f5:8a:47:4f:61:5e:15:08:36:d7:d8:e8:ba:fe:
7d:dd:7c:6f:69:48:49:63:c0:77:ba:18:8c:a8:83:1f:c0:94:
fd:f4:12:2f:81:92:a3:9c:cd:2a:fc:b6:14:a8:ce:7c:ba:7e:
6c:76:e9:4f:6a:c4:75:70:df:18:f0:87:33:38:d3:34:4e:f9:
60:ce:76:ac:40:3a:16:05:e9:c7:92:bb:90:94:93:b8:55:56:
d5:bd:e0:c0:9a:d9:b3:a8:40:11:9f:4f:cc:15:40:9b:61:0e:
79:59:66:a4:0f:f2:f0:02:fa:17:73:24:3f:75:ad:91:5f:33:
12:7a:e5:12:8f:8c:5d:d2:18:4d:f2:83:1c:a1:f8:54:06:18:
8b:2e:0e:88:01:70:f3:21:c1:ca:e3:1d:17:e7:91:77:1b:e1:
c0:06:82:44:ab:17:ab:71:49:ab:0d:6d:19:f1:bf:a4:dd:11:
88:81:c6:38:b9:db:99:46:b9:34:13:48:02:f0:c6:89:9b:dd:
7f:4e:26:61:c0:fa:5c:6e:c0:1d:59:3c:7c:b6:a1:4c:3f:63:
f3:d3:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:52:07 2025 by rpki-client