Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: 8XrQ1Tz+iUs/dqtQZ5yuR9BGKbX5AdmKIPWnNKpslq4=
Subject key identifier: 9B:39:D5:CD:9C:45:CD:DE:45:00:9E:35:ED:16:2A:6F:1A:6E:B8:F7
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 019681A2EE29B20E326A1AFF9101A62D083A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 13:01:00 +0000
Manifest this update: Tue 29 Apr 2025 13:01:00 +0000
Manifest next update: Wed 30 Apr 2025 13:01:00 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: A9oAMi71bknmqm3vj7eiuWgzDBfB5fYcC0CuwL4sHgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:ee:29:b2:0e:32:6a:1a:ff:91:01:a6:2d:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Apr 29 13:01:00 2025 GMT
Not After : Apr 30 13:01:00 2025 GMT
Subject: CN=9b39d5cd9c45cdde45009e35ed162a6f1a6eb8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:29:8d:ae:fa:5a:af:20:48:64:ba:e3:30:
9a:1d:fa:c8:d0:0d:ee:1e:82:e0:17:b2:13:3a:da:
6e:ec:74:4c:b5:ac:30:e5:0d:24:0d:91:9d:e6:07:
1b:a2:9f:86:a4:08:bd:71:17:1a:6b:b9:2e:be:60:
36:a6:26:73:a8:ed:cb:fa:a7:29:53:25:40:6f:a6:
33:5c:6d:5a:e1:eb:70:60:90:2a:e0:8a:a1:c8:1e:
ca:76:30:a8:01:79:9d:d3:83:48:48:13:48:a9:c0:
b7:9a:42:46:de:cc:79:d7:26:cc:28:63:96:91:99:
7a:e3:5c:bd:e7:2d:f3:c5:8b:3e:94:a6:79:ae:ac:
9d:99:67:32:00:83:11:0e:83:9e:34:29:7c:b6:8e:
6a:f9:92:09:55:4d:a7:cf:dc:4d:6c:90:0b:fa:b9:
34:99:ed:a7:14:25:43:da:ac:42:49:16:6f:45:71:
51:9a:be:47:26:1f:b4:3d:d8:23:35:d2:5d:10:3b:
da:4a:4e:ce:7d:61:00:fc:6b:df:58:73:43:c6:b1:
0d:99:70:bb:43:58:2b:ec:91:a0:13:04:0e:a8:25:
6c:2b:3b:41:20:31:2c:d3:b2:a8:42:b1:5e:6c:7b:
3b:27:3a:4c:ef:a0:3f:64:90:d5:86:c1:a3:18:df:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:D5:CD:9C:45:CD:DE:45:00:9E:35:ED:16:2A:6F:1A:6E:B8:F7
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b3:ba:1c:9a:ed:f1:cb:52:17:ab:c0:70:3e:c0:61:a9:6d:
2a:72:b1:e6:e4:9c:34:07:a4:98:d9:15:a3:ce:67:bc:b2:4f:
64:03:d9:bd:e7:16:fe:20:60:86:fc:7d:75:b9:63:cd:bb:d4:
5f:78:cf:5f:a4:20:00:65:10:d8:f1:b8:66:eb:b4:1c:4d:92:
9f:c1:66:f0:06:c8:97:d8:4f:10:f4:05:be:b3:cf:32:de:a9:
b8:5a:64:ea:d3:31:2a:53:04:89:ca:42:ec:5f:21:cd:b4:9a:
f2:e1:30:ac:e5:aa:ea:9f:e9:5c:e7:25:49:80:41:cc:f3:ec:
98:b1:e6:d8:0f:89:16:6d:a2:a5:e5:02:8b:e5:96:87:ed:ef:
0a:da:5a:45:94:3a:7a:9d:86:1b:5b:dc:a9:b0:1a:0a:34:3a:
8b:00:40:ed:18:ae:72:4b:7c:9a:85:54:3c:36:c7:aa:fd:6d:
a3:94:59:ff:03:39:86:3d:42:32:0d:dd:f7:65:4f:29:a8:29:
3f:79:45:63:aa:8f:e1:27:b7:f4:0f:f0:76:8a:8e:ca:bd:11:
18:c3:03:80:26:2a:ba:97:71:35:7a:bb:a9:9e:1e:3c:ff:a6:
86:de:53:e1:67:03:61:94:d6:1c:b7:b7:0a:d5:20:8d:f8:4e:
71:7a:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:24 2025 by rpki-client