Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: ihH9/1TjsZThwl3VprVGKNvfae06MJMBcD5k0Fu2by0=
Subject key identifier: 06:29:47:EF:25:71:1A:B4:44:2B:CD:0A:16:0E:A0:13:D1:9C:C4:19
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 01967BD8346453CC7A093C1548B3B9E76782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 0801
Signing time: Mon 28 Apr 2025 10:01:28 +0000
Manifest this update: Mon 28 Apr 2025 10:01:28 +0000
Manifest next update: Tue 29 Apr 2025 10:01:28 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: 6xTQs55qJ/KTOfG3xDEpZhUbNQHroZ2V6ftqmBw274U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:34:64:53:cc:7a:09:3c:15:48:b3:b9:e7:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Apr 28 10:01:28 2025 GMT
Not After : Apr 29 10:01:28 2025 GMT
Subject: CN=062947ef25711ab4442bcd0a160ea013d19cc419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:15:53:1f:ad:a9:2f:0d:15:66:31:d2:86:
69:1d:5d:62:39:ac:16:03:c9:7b:6c:83:c6:63:24:
cf:99:08:91:db:c4:cd:c7:bb:89:4e:e7:d8:bf:bf:
dc:fb:f2:64:9b:2c:45:c3:05:a6:89:b1:93:31:db:
70:64:d8:2e:41:97:6d:bd:55:ba:5f:23:a2:b4:1f:
8f:b2:eb:05:e5:1d:74:c1:f1:1b:11:2d:02:34:c9:
06:d8:bd:fd:fd:47:5b:d7:26:9e:36:35:10:27:11:
28:b1:52:d4:6b:a1:1e:8a:f5:d7:af:71:a3:17:19:
a2:14:6a:d5:0d:d5:14:ec:f2:87:65:6a:51:6f:40:
84:12:49:e5:3d:c1:4b:0c:60:3c:c3:ad:4d:13:7b:
cf:a9:1d:b2:8d:f2:2c:72:f3:4a:13:89:c5:e6:8b:
f2:b1:2d:f2:04:ad:6f:b9:86:7e:d4:25:4d:c2:ff:
1e:43:1b:79:f9:17:a0:22:2f:fe:a6:a5:3e:5e:81:
e3:b9:13:6b:5e:01:b5:af:37:b7:5c:53:c5:99:ec:
c9:2d:78:81:bd:f1:23:f2:af:0f:14:3d:35:a0:55:
fa:da:b1:94:9f:62:b3:28:4c:cc:24:38:2d:4a:cf:
c6:ff:19:3b:08:ea:3e:06:f5:c2:09:47:09:14:94:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:47:EF:25:71:1A:B4:44:2B:CD:0A:16:0E:A0:13:D1:9C:C4:19
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3f:cb:99:fb:44:0c:ab:5c:af:49:91:73:01:78:35:bc:00:
99:f8:f7:4b:3e:2a:b6:50:cd:52:1b:d1:a4:23:ae:e9:5f:8d:
fb:06:44:cb:17:77:29:03:aa:01:3b:5a:c8:45:33:2b:bb:98:
37:9f:32:06:fa:a5:18:34:6d:a9:79:be:6d:ea:98:79:c7:f8:
95:ee:b7:f5:14:e2:3a:0d:02:c8:f6:5d:94:fc:a5:d9:10:9c:
7a:4d:0d:d2:6a:f8:98:75:de:9d:4e:24:d3:01:3b:c9:bf:45:
9f:3a:9b:9f:59:21:83:a9:f4:78:99:b7:9c:20:67:fb:5d:9f:
af:19:1a:57:e8:98:6f:0d:a6:eb:8e:f9:c5:f0:9a:0f:e7:b2:
5e:86:dc:b5:b9:97:e0:ce:ed:8b:6b:3a:a3:3b:75:af:5e:95:
37:57:1b:96:1b:8a:9d:06:fa:8c:79:c9:56:4f:14:98:67:06:
25:9c:9b:b9:e4:dd:52:aa:c2:89:09:38:e2:12:6f:0e:e6:28:
a7:b9:14:9c:ef:5d:3f:57:3d:8b:6c:bf:11:79:49:69:3c:25:
6e:4b:36:51:43:89:88:44:0e:8e:c1:f1:db:aa:45:b3:df:61:
ec:1b:c3:c6:e3:84:b8:7e:b1:f8:bc:60:fc:78:27:65:da:50:
0e:36:da:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72DRkU8x6CTwVSLO552eCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwNDI4MTAwMTI4WhcNMjUwNDI5MTAwMTI4WjAzMTEwLwYDVQQD
EygwNjI5NDdlZjI1NzExYWI0NDQyYmNkMGExNjBlYTAxM2QxOWNjNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRoVUx+tqS8NFWYx0oZpHV1iOawW
A8l7bIPGYyTPmQiR28TNx7uJTufYv7/c+/JkmyxFwwWmibGTMdtwZNguQZdtvVW6
XyOitB+PsusF5R10wfEbES0CNMkG2L39/Udb1yaeNjUQJxEosVLUa6EeivXXr3Gj
FxmiFGrVDdUU7PKHZWpRb0CEEknlPcFLDGA8w61NE3vPqR2yjfIscvNKE4nF5ovy
sS3yBK1vuYZ+1CVNwv8eQxt5+RegIi/+pqU+XoHjuRNrXgG1rze3XFPFmezJLXiB
vfEj8q8PFD01oFX62rGUn2KzKEzMJDgtSs/G/xk7COo+BvXCCUcJFJToiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYpR+8lcRq0RCvNChYOoBPRnMQZMB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj/LmftE
DKtcr0mRcwF4NbwAmfj3Sz4qtlDNUhvRpCOu6V+N+wZEyxd3KQOqATtayEUzK7uY
N58yBvqlGDRtqXm+beqYecf4le639RTiOg0CyPZdlPyl2RCcek0N0mr4mHXenU4k
0wE7yb9Fnzqbn1khg6n0eJm3nCBn+12frxkaV+iYbw2m6475xfCaD+eyXobctbmX
4M7ti2s6ozt1r16VN1cblhuKnQb6jHnJVk8UmGcGJZybueTdUqrCiQk44hJvDuYo
p7kUnO9dP1c9i2y/EXlJaTwlbks2UUOJiEQOjsHx26pFs99h7BvDxuOEuH6x+Lxg
/HgnZdpQDjbaQg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:08:49 2025 by rpki-client