Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: LZqCE0bsNWfXk2SvbWB7RuckQw0dRepFNM0/H/Bk/5g=
Subject key identifier: D3:8F:B6:45:91:65:CB:A1:E6:EC:47:7B:2A:10:B9:47:13:34:00:25
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 019694BBB19124EB5A84034FC26FC717C1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 05EB
Signing time: Sat 03 May 2025 06:00:50 +0000
Manifest this update: Sat 03 May 2025 06:00:50 +0000
Manifest next update: Sun 04 May 2025 06:00:50 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: zaBC8VTCRNde8CjlijEVDk2Y5hM2gb2YAaKcgW02B9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:b1:91:24:eb:5a:84:03:4f:c2:6f:c7:17:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: May 3 06:00:50 2025 GMT
Not After : May 4 06:00:50 2025 GMT
Subject: CN=d38fb6459165cba1e6ec477b2a10b94713340025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:7b:70:07:ba:20:f2:9a:08:40:df:5e:4c:
a5:f9:20:f6:7b:5a:70:ca:58:d9:9f:75:55:18:3e:
f8:6a:56:a7:b0:8e:0a:41:51:69:68:f6:f6:74:2c:
6f:f4:ca:13:47:5b:bb:a6:5b:43:be:0f:8f:7f:98:
fc:d6:60:d4:3a:44:8a:c7:40:aa:f9:29:e1:66:1a:
41:3a:8e:f6:bf:59:88:f6:97:f7:17:39:ff:54:37:
92:8c:bb:50:26:07:a5:f4:9c:dc:76:f8:90:f5:54:
5e:4d:3b:87:d2:e9:64:a9:19:b7:0d:20:fe:93:b6:
67:24:2f:d4:4e:34:da:42:54:8e:53:97:41:0d:1d:
85:f1:9d:96:bf:21:0d:ed:7b:f4:8c:31:95:4f:92:
41:94:87:94:ed:ee:14:d0:9c:b9:87:ac:ba:77:e3:
7a:e4:8b:87:6a:42:4e:02:9b:98:62:03:a4:7e:3c:
5f:98:54:6e:65:bd:68:d7:1b:6c:21:24:ab:83:6b:
72:74:1a:f9:a9:a6:fb:d5:8f:09:19:87:68:d0:ac:
80:5c:b4:03:c7:e4:b0:6b:17:2d:c5:2e:c4:77:fe:
b6:de:9a:6a:0b:3e:b5:9d:59:a5:33:e9:d6:df:a0:
77:98:51:5e:48:28:10:d4:b7:f3:63:0e:13:26:30:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:B6:45:91:65:CB:A1:E6:EC:47:7B:2A:10:B9:47:13:34:00:25
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c9:1b:b3:51:6c:79:b1:3a:23:cd:71:ea:a7:26:f3:7f:1c:
73:1f:d1:31:9c:7a:df:3c:08:a4:95:f4:49:28:bd:af:ff:ce:
c8:d6:f0:8b:ae:f9:f4:35:f4:83:c6:05:35:6b:b5:ca:49:74:
e3:df:45:07:8f:3a:34:8c:02:b0:e6:da:ee:64:25:7a:b7:7f:
de:26:2b:97:8c:81:eb:e0:64:c2:3e:8a:26:68:3c:1a:60:d7:
c2:22:81:d3:c6:33:25:cf:96:e0:1f:6b:38:8e:d9:54:e7:81:
5f:65:c2:23:8d:18:b4:71:5a:f6:5a:7f:49:0c:7e:d4:38:49:
83:7f:31:81:1d:63:1e:d8:89:44:22:2a:1e:5d:2e:f5:9a:6f:
23:95:80:89:28:be:98:6a:78:2c:05:1c:49:1f:a9:ae:da:99:
95:d3:be:ba:41:ff:02:0f:6f:e3:0d:1e:aa:d6:4a:46:ed:0d:
da:e9:98:6f:2a:50:52:14:2e:ee:70:78:e5:e0:12:07:31:d6:
dc:00:5d:f0:e2:5a:61:98:b2:77:e8:a5:64:b0:dd:4a:2b:ec:
2f:60:66:c6:75:d4:be:2a:96:c5:03:72:51:1f:5d:3b:c9:d4:
09:c7:e0:69:f5:68:d1:82:fa:6d:51:e2:2a:e0:20:98:c7:48:
00:9e:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:55 2025 by rpki-client