Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: SssvxEpPBlATlsnF3KFKN3usrBfoiNIWUTU+RWFJx1U=
Subject key identifier: 48:C5:B5:EA:7D:A2:A4:57:6D:A4:84:3A:51:DB:A2:DF:E1:C2:07:CD
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 01968391A547CEA6019C21F793A297B342C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 0188
Signing time: Tue 29 Apr 2025 22:01:22 +0000
Manifest this update: Tue 29 Apr 2025 22:01:22 +0000
Manifest next update: Wed 30 Apr 2025 22:01:22 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: tA/WHeNL1an3xwSLB/SIQE9RxXREgoYf/Tx1+juuEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:a5:47:ce:a6:01:9c:21:f7:93:a2:97:b3:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Apr 29 22:01:22 2025 GMT
Not After : Apr 30 22:01:22 2025 GMT
Subject: CN=48c5b5ea7da2a4576da4843a51dba2dfe1c207cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:d6:c0:cd:ca:cf:34:8d:a9:d9:1a:39:d7:
01:6d:65:19:d9:0e:26:99:e6:31:a0:00:ee:cb:5c:
e9:b1:09:40:77:b3:4d:e6:40:4b:0e:cb:53:60:a2:
9d:22:e9:df:50:b3:45:0c:52:e3:39:f8:84:a6:a5:
ea:70:7b:e1:d9:9c:11:75:f6:51:64:7a:68:ca:8a:
78:42:39:84:2d:ea:8d:b2:72:71:a2:62:54:6e:2a:
0d:00:52:d8:d0:03:3a:89:17:2c:44:71:da:07:9b:
06:84:14:13:2f:b2:ef:d2:a3:a8:44:90:58:92:38:
a6:e8:42:16:0e:cf:3b:9f:07:cb:41:db:e2:ff:63:
e3:cc:16:a7:b8:22:63:a1:d9:b8:f2:7a:e5:9c:cd:
30:55:29:01:ef:ea:de:27:a9:73:5a:ee:1a:70:64:
52:62:fa:5d:73:cc:51:fa:37:79:7a:76:0c:9e:7a:
0b:78:bc:8f:23:b0:0c:0b:6f:25:fe:84:63:6f:6c:
30:07:e5:42:8d:1d:41:d6:e9:ea:de:23:66:e7:4a:
a6:cf:3e:b5:d6:db:ba:79:98:27:4c:8b:76:c0:be:
c2:a3:79:0e:25:d8:7e:14:20:a9:44:ca:bf:fa:18:
c7:72:3b:e1:36:ff:7e:5e:96:67:d4:b1:ac:83:7e:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:B5:EA:7D:A2:A4:57:6D:A4:84:3A:51:DB:A2:DF:E1:C2:07:CD
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:08:ab:69:f9:5c:aa:89:f5:83:f4:b8:c0:31:a9:d7:54:70:
fc:65:6d:dc:2a:c4:3b:c8:6b:eb:4b:e2:5f:d1:1c:52:e4:2d:
a2:f2:c2:d4:b8:5a:eb:a9:fe:84:fc:69:3b:ee:88:99:98:fd:
d1:8d:34:06:0f:38:73:0f:41:aa:0a:36:d6:63:e2:d5:1f:18:
3d:13:1e:70:e3:7a:6d:a4:d9:92:fb:31:39:7b:2d:bb:9e:81:
92:35:6d:d1:31:0c:0b:2e:f3:97:1e:f8:f4:63:3d:b4:65:86:
a9:36:7a:37:1b:82:a7:f4:70:a2:ba:5b:b5:b5:f9:f8:bc:03:
c6:74:25:b5:14:3c:46:31:ae:c8:7d:d9:8f:df:55:6f:a3:e8:
ea:3c:c0:da:23:8a:c0:7a:5f:30:db:3d:16:47:c8:3d:52:90:
98:dc:43:7d:67:b2:f4:8e:24:ce:8f:5b:e0:5d:2b:42:7e:ea:
8b:48:86:06:d2:00:47:96:5e:0a:bf:d2:dc:64:8e:1e:91:83:
cd:d0:60:9a:f4:26:3b:58:c5:85:82:c4:7c:32:d6:af:ce:f0:
94:44:fb:4e:d7:0d:76:bc:79:34:14:ea:e4:93:48:11:ac:5c:
3c:fb:1b:f5:30:22:dd:56:18:03:6d:6a:8e:19:d5:3d:74:bd:
ec:20:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:11:42 2025 by rpki-client