Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: FwcDzx8FH/vWwy/dj27XiBixZYgUNoPI3TR3LaVg88U=
Subject key identifier: 97:75:EC:86:27:6B:AA:10:25:87:D4:F0:FB:07:19:2A:25:B9:64:EF
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 0196760C236701BF5E531E9EA36EA2DF227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 0F95
Signing time: Sun 27 Apr 2025 07:00:29 +0000
Manifest this update: Sun 27 Apr 2025 07:00:29 +0000
Manifest next update: Mon 28 Apr 2025 07:00:29 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: s+lnpMvGZ1fNTnBCP07QNBg+XkCVwThDV3JDPDpRzRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:23:67:01:bf:5e:53:1e:9e:a3:6e:a2:df:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Apr 27 07:00:29 2025 GMT
Not After : Apr 28 07:00:29 2025 GMT
Subject: CN=9775ec86276baa102587d4f0fb07192a25b964ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:63:a9:1d:5f:de:90:cb:6c:c6:2b:38:6c:
f6:cf:c9:73:cc:37:3f:55:d0:66:3d:61:6e:e8:39:
95:2b:40:32:64:3d:ad:90:5c:ff:08:68:52:67:0a:
50:8a:45:a3:ec:95:56:0c:35:12:c8:fa:1c:79:3d:
fd:5f:dd:e3:e7:54:e7:08:4d:63:6c:7c:c0:3e:09:
e2:9b:e0:8a:0d:ab:7f:51:fa:fc:cc:c6:20:7e:31:
f9:f4:22:2d:24:2a:15:1a:ac:62:81:87:8b:f0:87:
ef:a5:fa:ca:5b:44:56:5d:bd:55:00:14:67:6b:cf:
b5:e5:43:17:0c:3a:34:17:68:42:cf:14:a5:87:21:
3d:bc:fa:4c:04:e1:f9:5b:fd:e4:06:59:dd:d7:e5:
21:8f:a8:e7:a5:20:68:39:a8:18:d8:41:4e:c5:3f:
f4:ee:32:0e:2f:25:f7:09:41:0e:f6:5b:5b:1c:8e:
6b:82:03:a5:b6:6e:43:07:94:f9:c2:20:0d:56:4c:
1f:2a:f3:0c:9c:3f:c0:23:a4:0c:9b:f4:13:2c:58:
f0:a2:09:cd:40:6e:f7:91:e1:00:43:87:80:74:b4:
56:80:34:44:f4:6a:5c:c4:1a:1d:d1:3a:dd:ee:07:
15:6a:09:31:07:b6:d7:bd:95:a8:bb:b6:5a:69:94:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:EC:86:27:6B:AA:10:25:87:D4:F0:FB:07:19:2A:25:B9:64:EF
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:51:fb:87:09:76:72:46:7a:b7:ed:ae:54:a6:49:2a:ef:
7f:88:3d:fa:fa:9c:7a:11:5c:0a:5d:22:9d:91:6b:96:38:08:
0d:9a:3e:78:93:de:23:29:ad:77:26:b2:35:13:2a:8a:20:67:
b1:83:76:7c:75:e9:39:6d:8a:b4:8b:97:b6:ff:33:01:37:b1:
90:0a:f4:59:1c:35:0f:70:09:70:d8:45:92:9f:52:81:5f:12:
b5:2e:38:3b:97:61:76:e3:da:e4:35:a5:d2:b1:66:b5:a6:ee:
c2:6f:39:ad:0c:e9:78:c1:12:9f:fb:74:82:46:3e:4e:7b:78:
46:ca:05:14:8a:30:24:02:42:c8:73:8f:52:0b:14:22:69:60:
39:d9:b0:bd:d0:93:95:07:e7:08:17:de:f8:fe:64:91:c1:59:
0d:a1:43:bf:c1:c1:72:7d:ac:00:33:18:7b:89:59:52:21:94:
61:78:ea:22:6e:8e:96:0e:f1:8c:dc:84:ed:4d:db:52:2e:c7:
ed:3e:84:6a:86:08:b9:6d:71:52:87:bf:a9:03:54:fa:df:99:
a5:c0:1f:f5:0b:d4:44:a2:5e:7b:bd:9b:89:eb:fb:c5:9f:21:
ab:c0:fc:fa:60:48:00:45:ee:64:b3:30:93:de:88:7a:5d:b6:
4b:36:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:20 2025 by rpki-client