Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: orv6NLpCRY5TBPJAoIuofKkTTTr2CK8oF7w0dKGrKVs=
Subject key identifier: 5C:0D:AF:77:F2:A7:35:A2:E8:D0:08:4C:4D:6C:50:40:2A:E8:16:B3
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01968022726AD7266AF3DD424D8DCFEE6778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0B6D
Signing time: Tue 29 Apr 2025 06:01:03 +0000
Manifest this update: Tue 29 Apr 2025 06:01:03 +0000
Manifest next update: Wed 30 Apr 2025 06:01:03 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: ckVWlGKPubiJjRekgTlmcClEPm7mOKmicTa1JwdP/oI=)
2: xc-UZLTq46CsoQwfrFH96loErL8.roa (hash: imTueTgO4U1HucCZCJDX7it/v879nWtNhBcC9zIM6Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:72:6a:d7:26:6a:f3:dd:42:4d:8d:cf:ee:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Apr 29 06:01:03 2025 GMT
Not After : Apr 30 06:01:03 2025 GMT
Subject: CN=5c0daf77f2a735a2e8d0084c4d6c50402ae816b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:4c:a2:4c:db:94:a2:0f:ec:c8:ea:8b:c7:
c9:21:35:88:6e:3f:e5:cf:7c:86:05:d5:d3:da:37:
37:44:7f:cb:4c:c2:1a:56:db:84:75:51:20:6d:9d:
2c:66:de:86:c5:8c:b8:18:a7:25:bb:e7:81:e7:fe:
7e:1e:5e:ca:98:ed:f8:db:49:18:f8:62:02:50:6b:
c7:b8:8f:e8:43:5f:68:91:13:79:07:16:68:53:2f:
75:22:cd:f7:8f:7d:23:81:f7:c5:e1:1b:d5:6d:cd:
14:be:48:f5:f8:44:f7:41:4e:2a:98:38:ab:d1:a1:
f2:80:c2:ae:0e:42:1a:ef:4b:56:19:e0:1c:0b:03:
e8:28:ec:5c:13:44:bf:d4:56:be:6a:41:3d:9e:ce:
05:fa:7b:0e:72:6b:5d:59:06:b1:b6:67:4b:3d:8e:
13:ee:4a:51:18:80:6a:9f:bd:f9:73:f5:e3:11:41:
77:ea:45:55:92:ce:20:2a:79:68:75:1e:9f:ad:36:
5d:ec:b0:4e:5b:14:63:5c:46:9b:e8:f9:df:48:34:
29:df:d9:50:b9:a3:36:f4:ad:65:cd:18:07:fb:69:
ca:7a:fa:5b:b9:3c:28:b1:be:99:49:c8:2e:d5:76:
be:f0:5d:34:e2:db:2f:46:12:49:68:37:7e:a1:62:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:AF:77:F2:A7:35:A2:E8:D0:08:4C:4D:6C:50:40:2A:E8:16:B3
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:11:7d:55:c4:d5:4e:e3:08:47:6a:f4:b3:7c:53:fb:ff:
c0:9a:9f:82:4a:71:11:ac:42:13:1b:20:a3:63:f8:54:b9:28:
e9:c9:54:d5:b8:72:e4:c9:52:b8:7f:a9:40:3f:f3:a3:bb:e5:
09:ec:58:de:ac:f1:6a:26:e0:36:aa:8c:9a:46:d6:b0:91:79:
30:36:12:47:37:23:81:dd:86:6d:9e:43:c1:39:2b:72:92:3d:
69:4f:fe:88:5a:29:fb:6d:be:6b:f8:02:8f:2f:52:98:d7:aa:
67:40:25:e7:70:42:2c:91:5a:03:f3:b7:4c:45:e6:37:3d:24:
ca:c2:93:32:65:f4:3b:c4:7f:96:98:04:7e:83:6c:2d:65:17:
3a:0a:97:b1:e0:d8:43:c1:a3:c0:1a:26:f4:3c:81:92:37:51:
68:92:57:dd:8c:f3:43:11:87:6f:e7:0d:03:d9:36:13:92:01:
36:74:42:ce:d9:fd:04:9f:58:f9:b0:54:1f:30:f5:9d:d1:42:
23:41:77:19:5d:90:61:f8:33:d6:2a:87:65:e1:21:c2:54:d5:
a4:1e:d3:d5:f7:04:95:30:8a:79:02:dd:39:3d:0f:fa:ba:8b:
f6:02:56:f8:1a:84:e3:47:96:56:36:56:18:ce:e8:da:62:fa:
3c:21:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:26:41 2025 by rpki-client