Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: 4d74ggycmaIaGKXH7e/BQOdG77oA+mynWfMphT2snnQ=
Subject key identifier: 81:C9:58:F9:4E:9F:23:29:C3:28:C8:75:E0:32:FC:AE:DE:AA:92:3E
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 01967FB4A20CD1B7DE8044D55C28F24D91EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 05FD
Signing time: Tue 29 Apr 2025 04:01:06 +0000
Manifest this update: Tue 29 Apr 2025 04:01:06 +0000
Manifest next update: Wed 30 Apr 2025 04:01:06 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: Et+iOOO5MtWsWmO7ilc+EDd1QkbbOroF5Ta6a4fPHQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:a2:0c:d1:b7:de:80:44:d5:5c:28:f2:4d:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Apr 29 04:01:06 2025 GMT
Not After : Apr 30 04:01:06 2025 GMT
Subject: CN=81c958f94e9f2329c328c875e032fcaedeaa923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:92:9d:f9:e3:af:fb:e5:88:66:33:50:97:
da:dc:2b:2f:3a:eb:71:68:01:cb:c6:a3:e6:e7:db:
93:c1:41:36:dc:71:96:9d:54:6b:7c:f3:4f:9a:00:
c8:b1:d2:d8:eb:94:85:48:1d:15:70:72:64:a1:e3:
e8:5c:c8:46:d6:33:83:2f:97:76:29:da:c2:10:35:
19:b7:ae:70:c4:81:41:b3:a5:9f:3f:f0:49:a4:fa:
53:9f:e6:6b:2f:c4:18:6b:f8:e6:61:8d:50:42:20:
5d:89:0e:ad:29:b0:a4:5d:47:d5:67:12:2a:ca:9a:
f1:ce:5f:04:e4:6e:02:9d:66:a1:d4:8d:a1:1c:48:
70:32:0b:b7:60:38:18:09:ed:5b:2f:84:7c:54:d8:
9b:e9:f6:59:b5:b2:f8:ac:86:35:fc:66:71:69:70:
18:d4:10:ba:11:9b:7b:7f:cd:6b:52:5e:c8:c2:fe:
fe:ff:5d:8c:a0:9d:6f:45:56:45:64:94:2e:b8:3f:
c8:cd:79:ef:76:43:58:2a:17:58:03:30:07:6e:70:
fa:0a:c0:89:ea:58:72:b7:aa:fb:11:c3:e7:e9:50:
a3:6e:fa:e5:23:0e:13:53:f0:19:49:1a:b2:64:93:
f7:f7:95:04:32:7e:b3:e2:5a:ff:9a:31:8e:f7:d3:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:58:F9:4E:9F:23:29:C3:28:C8:75:E0:32:FC:AE:DE:AA:92:3E
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:58:ed:49:c4:6f:f0:30:40:44:9e:5a:08:08:46:12:94:
a5:6f:35:e7:b3:be:96:e0:02:30:77:37:ad:9c:e9:ee:de:94:
23:19:d6:38:3a:aa:91:f1:84:66:38:b8:5a:7b:d2:4c:06:da:
72:c1:b3:63:d5:66:e5:f6:64:3e:85:6e:5f:64:f5:9a:52:47:
ea:6b:b3:3a:6f:27:32:95:4d:37:34:2b:15:7f:96:49:21:db:
f2:97:9e:8d:0e:21:df:37:64:cf:c8:42:a1:8e:c1:cc:07:89:
d7:82:b4:e8:0a:82:43:05:8f:3f:9f:93:d8:4a:82:04:a9:c6:
c6:b7:29:ec:e0:84:27:ec:37:f7:b7:0a:05:d3:b3:a8:07:e3:
8a:91:6f:61:ea:c0:f7:ef:b3:58:1c:37:fc:41:b4:45:54:79:
00:77:1a:75:82:5e:71:a9:a7:ce:e7:46:b5:4e:ba:e1:5e:af:
d3:d9:d0:8a:05:99:4e:b0:df:c1:63:80:e6:04:00:15:6f:63:
1a:08:6c:4b:a6:23:f6:5d:fe:29:17:ba:07:d3:e2:42:9f:b8:
85:fc:2e:f6:c4:4f:7e:34:79:3d:c4:0c:38:05:65:1d:21:65:
56:ab:89:16:e0:7c:67:a8:4e:89:aa:80:28:67:31:82:76:5f:
cb:01:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:14 2025 by rpki-client