Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: 0SYlJTN7wwuiNOMbHgEe8+IX/QSUPvZGrD7UnZ+zYnk=
Subject key identifier: E6:41:E6:57:0F:83:8D:E7:94:EA:CB:E4:65:34:0C:3B:6E:8A:29:79
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 019679E9810FF9BF70CA2AD92B9B28EA37E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 0490
Signing time: Mon 28 Apr 2025 01:01:08 +0000
Manifest this update: Mon 28 Apr 2025 01:01:08 +0000
Manifest next update: Tue 29 Apr 2025 01:01:08 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: bDMCEHH9Py7ek1a4BrBr1GwwnIElchvhVY1cS2txWmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:81:0f:f9:bf:70:ca:2a:d9:2b:9b:28:ea:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Apr 28 01:01:08 2025 GMT
Not After : Apr 29 01:01:08 2025 GMT
Subject: CN=e641e6570f838de794eacbe465340c3b6e8a2979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:17:30:31:21:60:fb:85:12:6b:33:2f:14:
95:67:f2:c6:72:95:7d:2e:83:7b:41:e0:e3:4a:53:
43:b7:a6:bc:0a:a2:df:a3:6f:b0:df:a1:94:e2:23:
89:57:16:f7:54:71:b2:f7:f5:f7:96:5f:ca:27:d4:
13:04:34:08:d9:9b:df:26:1e:2d:2b:f9:9c:6d:fe:
80:37:ff:41:f0:85:33:71:a5:8c:cb:90:63:83:0b:
c2:60:ef:66:74:98:94:2c:d5:38:4f:5d:fa:02:74:
2c:e7:1c:fa:41:08:a6:79:a4:45:1a:16:77:14:67:
41:14:b5:60:a1:0f:23:0b:e7:ea:03:42:e4:3f:f6:
36:41:7d:89:bb:d3:18:1a:ad:87:b1:b9:a7:23:c7:
ab:f4:19:57:28:0c:d9:34:be:b6:cf:ae:52:91:37:
50:3f:72:dd:00:f6:48:73:76:02:78:e8:1e:24:9e:
42:4c:d9:08:5b:2d:92:02:0b:56:64:64:88:d8:eb:
d0:2b:15:59:b2:a3:08:8e:fc:40:66:9f:3a:cc:02:
73:4f:0e:ad:d7:83:e8:7f:63:5e:10:a7:1f:e5:d7:
78:64:27:e0:0e:c7:9a:51:2e:de:0d:14:0f:89:76:
e9:1b:f5:67:8b:a8:9a:1a:33:1a:ff:93:ac:d8:bf:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:E6:57:0F:83:8D:E7:94:EA:CB:E4:65:34:0C:3B:6E:8A:29:79
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d7:af:32:4a:fd:6e:7f:be:6a:f6:ef:e7:4e:e7:9b:9d:21:
b5:86:47:d8:01:6e:51:81:66:b7:24:3d:62:b8:3b:a6:b0:f0:
30:79:e2:50:66:7a:17:d5:fa:30:ae:1b:ec:71:6e:52:c3:7e:
bd:a2:8f:9f:a4:5d:6c:35:ca:ab:47:7c:16:0f:be:f3:2e:b3:
51:57:31:bb:55:06:f4:b9:67:d6:88:c6:4b:2e:45:d6:9d:65:
15:a2:ac:e9:d7:ce:fd:06:a4:2e:f8:b3:2e:c0:d6:f3:c1:c2:
98:90:72:80:6b:ee:24:b9:88:23:34:02:c1:76:e7:4b:da:9d:
44:e7:07:c4:73:ed:27:08:20:6a:54:a0:ac:2a:33:8b:2b:fb:
7f:13:a9:67:23:ac:85:ac:4b:49:e8:07:79:8a:eb:a3:53:36:
e6:ba:73:d8:0c:81:67:49:59:ab:20:f3:1d:72:c0:18:c3:77:
32:6e:97:dd:eb:cd:c6:46:38:02:02:bb:84:46:c2:fb:d3:1d:
1e:69:f8:73:44:fd:77:13:91:be:0e:e5:fd:de:c7:04:44:90:
a7:59:70:4a:c8:01:dd:31:4a:fb:42:ca:ce:82:f5:45:d2:45:
b6:43:21:05:a2:8f:1f:d4:ce:38:4e:e0:fa:73:3a:20:d9:a3:
95:2e:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:32:59 2025 by rpki-client