Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: LjmbrPhO+CdooygKLWTiZSrXOEvWYDZaYUmGgisfaHg=
Subject key identifier: C5:AC:CA:42:BE:05:A4:2D:CC:2B:3D:FD:AF:DC:68:97:14:44:51:60
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 01967DC583562E5F532959E620ECC36356B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 12A4
Signing time: Mon 28 Apr 2025 19:00:18 +0000
Manifest this update: Mon 28 Apr 2025 19:00:18 +0000
Manifest next update: Tue 29 Apr 2025 19:00:18 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: xJw1Q/dVUPp9hwDn5RuiGlNtxLoMvNIXge3V+3yUKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:83:56:2e:5f:53:29:59:e6:20:ec:c3:63:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: Apr 28 19:00:18 2025 GMT
Not After : Apr 29 19:00:18 2025 GMT
Subject: CN=c5acca42be05a42dcc2b3dfdafdc689714445160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:3a:83:0e:2f:5d:82:56:d0:a2:b9:fd:fd:
0c:36:52:ae:ef:5d:df:2a:ca:be:2a:85:0d:38:17:
02:3d:05:0f:24:6e:28:55:84:de:32:ee:e5:66:d0:
01:fa:14:24:1c:b6:74:5c:57:37:4b:d8:ca:86:36:
55:90:14:25:ff:c3:69:14:4a:6e:3a:fa:64:80:52:
91:38:0f:ef:9e:11:cc:39:ce:b2:52:d3:f8:8f:c2:
7b:14:21:36:30:7f:b4:02:3e:ec:47:19:09:38:1b:
a5:56:d1:c7:31:07:75:7e:68:e4:4f:f7:59:08:d7:
24:59:17:80:80:04:ee:82:bd:84:8b:9a:dd:7e:76:
ff:37:e7:ae:5b:e8:7d:2d:a2:e1:01:a8:0d:c2:a9:
1e:43:08:dd:77:b5:32:46:3e:3c:b9:8a:2c:fd:08:
40:2a:7d:13:cd:ae:28:5b:b0:18:b0:c9:cc:cb:a2:
e3:ae:46:9b:e5:6f:55:b9:c1:02:5c:49:e0:17:ae:
e1:48:a6:eb:52:d1:7f:9e:c0:5e:85:85:24:22:f6:
25:f6:4d:62:63:77:ae:77:37:3d:8a:d2:5b:86:f7:
b3:c6:43:10:a3:16:05:29:08:78:09:a3:42:7d:61:
fa:6a:c0:54:b0:21:57:e4:f8:77:01:e3:9d:2b:f3:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:CA:42:BE:05:A4:2D:CC:2B:3D:FD:AF:DC:68:97:14:44:51:60
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:c9:25:65:d4:0a:73:48:f1:ae:60:b9:ce:25:41:e1:67:
92:27:aa:2f:b3:95:af:9d:10:c9:3f:77:4c:35:22:2e:61:f7:
11:cd:8d:60:37:a8:4a:27:a6:1a:94:55:d8:fc:d3:26:b8:74:
88:24:98:43:30:3c:e4:04:d7:40:45:bb:8e:42:9f:f3:ef:39:
db:c1:ed:1d:7d:23:a3:1f:29:90:56:2a:3e:ba:79:a6:09:9b:
9d:53:65:e7:98:f8:e8:f6:bc:f9:5d:86:4d:5e:73:fa:d5:cf:
65:e4:58:69:3f:dd:6f:9a:37:61:d5:67:1b:b3:aa:37:8f:5d:
a3:49:23:58:dc:d0:60:0d:ae:95:bb:6d:99:1f:d9:9b:c7:3b:
f8:69:d0:74:a2:79:28:d0:25:42:5e:19:86:c9:59:7c:d6:f4:
75:cc:74:38:84:45:7a:02:76:b2:f2:22:48:2a:4f:ee:e3:fc:
90:06:65:0a:1b:16:82:f5:41:7d:1c:a6:66:9e:cc:91:99:a0:
26:8f:0d:ce:5f:52:b7:33:54:65:16:c3:c2:c9:ed:47:de:53:
a4:9a:4e:35:1c:f3:fd:3a:07:59:50:bb:d9:7b:e8:ab:e2:ed:
dd:7a:47:88:13:97:43:cd:0b:9a:16:d0:22:23:ce:cc:bb:75:
be:2b:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:14 2025 by rpki-client