Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: EUh5BMRw46ItyICLOEYeHq7ynBCKxAAhDJ3PkdaZ7No=
Subject key identifier: 11:3E:97:B4:3C:B6:76:82:F6:B9:90:C1:9D:72:06:7B:F9:63:69:F2
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 0196827E1262B9F62F232A06BEAEED84BB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 02DB
Signing time: Tue 29 Apr 2025 17:00:22 +0000
Manifest this update: Tue 29 Apr 2025 17:00:22 +0000
Manifest next update: Wed 30 Apr 2025 17:00:22 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: QHhZ6qySZ6AcfjNQkpLyIgmfEW8S4LyKeuxVHJhbPJM=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:12:62:b9:f6:2f:23:2a:06:be:ae:ed:84:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Apr 29 17:00:22 2025 GMT
Not After : Apr 30 17:00:22 2025 GMT
Subject: CN=113e97b43cb67682f6b990c19d72067bf96369f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:46:e2:f7:bd:ca:53:b2:df:d3:fe:db:21:
ec:4e:80:ca:c9:cc:01:da:25:84:68:a6:24:f1:3b:
1b:cd:bb:c5:44:b1:e8:cd:a3:6a:0b:2b:aa:ec:37:
0d:a9:b5:d2:d7:ec:d1:f9:d2:ef:8f:6c:e4:dc:8e:
4d:b2:67:e5:6d:0b:2b:12:ce:86:13:36:78:61:78:
f8:bc:06:d5:1d:5c:7c:4d:8a:bf:03:22:ea:d8:20:
41:63:a1:58:a9:e6:d9:4b:d1:d0:46:ae:c9:1d:9b:
9b:00:d3:dc:45:6e:77:4a:79:61:59:a0:d2:84:35:
15:5d:92:e0:3c:d3:95:62:08:1a:98:df:de:e6:d1:
14:32:af:02:4a:f4:f6:a7:d6:8d:b3:07:ff:68:32:
fb:a3:57:5a:72:90:20:07:e4:d6:59:fa:bf:fc:6a:
48:12:3d:fb:44:bc:fa:71:55:94:d1:c0:84:bb:91:
5a:3a:4f:03:31:ae:77:12:cb:c3:7a:9d:f5:8f:32:
fa:1a:29:ba:5c:b7:de:06:01:9f:d3:1b:e2:b4:ba:
f5:7e:90:13:ad:1a:9c:2d:41:2f:c9:d8:9b:54:09:
75:d9:6b:6c:15:4d:09:76:87:9c:f1:f1:2a:41:1d:
c1:30:78:28:58:85:a4:71:38:87:24:55:e4:3f:4f:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:97:B4:3C:B6:76:82:F6:B9:90:C1:9D:72:06:7B:F9:63:69:F2
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:68:f3:74:08:e7:27:a8:a8:0e:fa:a0:28:6c:01:1d:10:
57:8f:2b:50:fb:50:b2:12:76:db:ae:14:8b:de:c8:58:55:45:
5e:09:45:38:42:ef:57:f8:7f:12:64:aa:02:0b:42:8a:8c:a4:
7f:70:c3:fe:b6:f1:f4:29:86:a4:76:9e:cb:ca:02:ba:46:a7:
02:56:ed:a9:85:4a:ee:61:54:eb:b4:e8:ab:5e:61:ba:9b:7e:
73:69:cd:ea:6d:3a:b3:4b:40:de:3b:3f:03:52:ce:83:6d:68:
3a:68:d1:9a:37:af:4d:ea:d8:f1:e5:f9:30:0b:d5:c2:e9:f4:
f3:b9:61:fe:aa:48:cd:9f:b9:19:01:ab:ea:cf:36:94:b3:f9:
90:c7:be:50:0e:1d:59:8f:c3:b2:2c:ee:93:8f:7c:f4:44:d9:
37:88:05:0d:d5:36:32:e0:c9:4d:ae:95:b3:54:f0:4c:4f:df:
99:c5:18:3b:38:6e:a8:a7:e8:bd:62:6d:ff:bd:b5:61:53:24:
61:e4:68:03:78:53:88:06:1b:74:d8:9a:db:b5:07:f8:15:07:
a8:09:21:e0:a6:33:da:5d:1c:d3:fc:9e:12:21:bf:07:dd:34:
fa:c3:5d:e0:38:46:ef:a9:08:bc:bd:63:09:3a:ef:8a:f0:3b:
34:70:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:56:55 2025 by rpki-client