Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: wmVt9Ii6QOcpBGnBqxWk0Xa9XCUb4RlnypndVqRv2QY=
Subject key identifier: 9C:88:8F:EB:B0:F5:0A:D3:17:76:18:A3:E0:49:80:DD:2F:C4:6B:9F
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0196741D7CFE7D88C89603AD04CE889C1C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 11DE
Signing time: Sat 26 Apr 2025 22:00:11 +0000
Manifest this update: Sat 26 Apr 2025 22:00:11 +0000
Manifest next update: Sun 27 Apr 2025 22:00:11 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: Qk3/SjonzilMeMP7GRPpUOBpTnNUd+UdnycrVlvLNxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:7c:fe:7d:88:c8:96:03:ad:04:ce:88:9c:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Apr 26 22:00:11 2025 GMT
Not After : Apr 27 22:00:11 2025 GMT
Subject: CN=9c888febb0f50ad3177618a3e04980dd2fc46b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:0e:35:26:75:ec:36:d1:6a:1c:16:e9:6c:
ed:40:d5:0e:d9:03:68:d9:6a:b0:38:fd:48:bd:4d:
38:b6:03:ae:c3:9f:cf:b2:a7:2d:ac:e2:5a:b0:fa:
20:d9:b3:c2:b5:95:a0:06:b3:20:1b:d1:8e:0c:41:
e3:3f:80:2c:07:6d:89:c1:80:b6:ef:1b:ed:e7:99:
99:3f:0d:af:cb:ba:76:29:f7:e1:c9:15:dd:63:f2:
8e:da:e3:3b:10:49:1e:5e:bd:df:97:bb:4b:68:da:
1e:4f:fe:57:74:11:b9:01:27:76:05:35:b0:67:a6:
e8:4c:b6:af:48:37:a6:fd:12:00:dd:e2:9f:65:af:
50:9f:7c:00:a6:58:ce:c3:f5:fa:b2:e7:f1:08:42:
4a:27:4c:b1:fe:52:c9:92:94:e7:17:67:28:78:49:
7b:6c:76:41:f8:6d:08:83:d6:da:08:dd:9e:db:7a:
f1:b2:60:9c:61:58:df:fb:98:4b:4f:84:de:a9:88:
e8:35:d7:3f:10:c6:8d:8e:0a:c9:4c:ec:ea:0b:d6:
92:3d:b9:76:cd:38:bb:75:0e:ca:38:6d:6e:47:6b:
d5:64:e4:8b:5b:60:c7:53:7e:02:5e:3f:5d:ba:2d:
5d:4a:15:74:42:8c:4e:9f:1c:3e:ec:f3:46:9d:7b:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:8F:EB:B0:F5:0A:D3:17:76:18:A3:E0:49:80:DD:2F:C4:6B:9F
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:78:d7:15:b8:be:51:13:55:a3:a7:41:87:65:0f:65:fa:
a0:d9:04:59:78:4d:6f:54:2f:a2:e1:4e:54:2c:8e:63:b4:fe:
16:0d:3d:30:0e:a2:2c:bf:40:b5:82:73:19:15:c5:9a:89:ec:
ac:be:5a:a1:31:05:da:98:37:87:f4:46:68:65:37:94:aa:18:
66:35:6b:ee:40:9a:62:6f:b1:23:b4:d0:c0:2a:16:67:bf:a5:
1a:5b:b1:ff:2c:fb:f8:39:fc:8c:93:10:0e:6d:92:94:05:e1:
90:88:29:36:1a:b7:48:2e:d0:0a:f3:fd:3d:fa:21:55:3b:ee:
58:45:c5:33:12:b1:74:9e:12:1f:be:9e:0b:f2:a0:5b:6e:17:
3a:58:29:03:e2:59:a3:5b:1d:7c:4c:d0:57:35:d8:2e:d9:8e:
0a:3d:71:91:f0:8d:94:47:32:63:04:32:b8:03:be:80:e9:0d:
2a:e9:aa:6a:30:10:8b:fe:9e:74:af:81:9c:ed:05:63:d6:7c:
10:fa:4e:af:95:32:3b:26:22:a0:81:27:4c:59:91:12:6c:c2:
ca:19:bc:a9:48:64:87:72:84:f1:43:2d:2b:bb:2d:33:ae:62:
00:c3:c5:8c:dd:eb:f1:97:c6:61:fa:66:76:da:cc:fb:6a:67:
d3:e8:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:33 2025 by rpki-client