Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: i9Zt+3bWBjle+ickuoX0/IElo8n3G1Ot6C6ISjJ4bR4=
Subject key identifier: 88:D3:37:FC:41:29:76:F6:8D:8F:3F:BF:13:6D:31:5A:78:3D:D8:5D
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 01967DFCB38CF0209ED47C1AB92FFF4F3F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0C0C
Signing time: Mon 28 Apr 2025 20:00:34 +0000
Manifest this update: Mon 28 Apr 2025 20:00:34 +0000
Manifest next update: Tue 29 Apr 2025 20:00:34 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: J6vc5k26pG3Ps4bTw5sVjrPYbwpo2JRZQdOsEiAenfc=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:b3:8c:f0:20:9e:d4:7c:1a:b9:2f:ff:4f:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Apr 28 20:00:34 2025 GMT
Not After : Apr 29 20:00:34 2025 GMT
Subject: CN=88d337fc412976f68d8f3fbf136d315a783dd85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:12:9b:2f:c3:17:d5:85:69:16:e1:49:3f:
ef:30:4b:27:fc:f2:bd:ad:60:4c:74:c1:d6:23:b4:
94:33:41:05:de:a4:e2:56:94:9b:0b:e6:9c:31:0c:
62:48:a4:d2:97:0e:a4:7e:c0:b0:62:1b:b2:24:3b:
6b:aa:1a:14:9b:17:6c:23:65:2a:a7:5b:ee:67:d3:
45:e9:a2:ac:b1:6a:3f:90:f8:08:bd:38:ac:51:78:
21:da:23:13:03:1b:05:cc:03:68:23:e1:ee:f9:8b:
35:c5:16:5b:83:26:2c:b2:7c:78:24:0c:dc:42:3c:
ce:bc:39:98:ca:04:bf:77:57:48:b3:87:92:42:e7:
b8:9c:4f:96:05:9e:d9:67:dd:8c:ef:ea:df:c4:7a:
ca:e3:be:48:65:88:bc:3b:58:b3:0f:a8:6d:5d:47:
21:05:2f:0a:9a:0a:fd:35:94:2a:f2:e3:47:1d:c0:
c4:73:60:e5:bc:3e:a6:a9:78:ed:a8:af:f1:7c:af:
30:16:7b:c4:0e:54:13:09:c0:eb:3d:96:f7:d8:5d:
6e:60:97:c3:0c:6f:9a:8a:0d:b9:56:ce:e3:1c:8e:
fe:d5:be:84:f2:09:d1:81:66:91:d3:2f:f5:d4:c3:
b0:42:59:7a:8a:41:dd:3a:0e:15:ea:36:60:64:42:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:37:FC:41:29:76:F6:8D:8F:3F:BF:13:6D:31:5A:78:3D:D8:5D
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:48:60:72:20:7e:ae:73:cd:a1:e1:3f:8c:4e:b3:9e:7d:
15:95:ed:06:e6:53:54:93:8f:4e:78:2b:2e:bc:b9:29:84:15:
9c:07:8a:bf:57:38:b0:19:fd:28:79:b9:2d:f2:ba:7a:72:87:
f1:d0:6d:4a:f0:3e:0e:db:f9:d5:3e:24:af:e1:6e:1e:ab:7d:
9f:77:89:6a:f7:e8:d1:83:84:97:be:28:0a:93:39:ab:fd:f2:
f5:10:ec:e7:c2:60:29:8c:e6:bf:f7:92:03:9b:a7:fe:42:d1:
a8:a0:79:89:c5:81:3b:1e:0b:52:7f:d6:a2:1e:79:9f:8e:79:
00:89:0f:59:03:83:0a:30:44:87:4c:40:91:c0:30:26:b8:7b:
b1:08:f1:30:b4:c8:c3:00:cc:47:69:42:4e:4f:e2:ca:41:4e:
6d:5e:db:4a:1d:6c:e1:c4:3f:b8:fb:21:3e:e3:2a:13:5f:4e:
ed:8c:e3:73:93:81:74:68:9d:a8:c7:91:20:40:95:92:ea:c0:
fb:49:fc:44:8b:5f:c9:42:56:6c:df:c5:01:2a:67:ba:47:27:
41:95:1d:dc:83:93:91:0e:64:f6:e3:22:83:e7:e0:e1:3b:05:
c4:3a:69:a2:3e:ad:ae:1a:bc:40:b8:34:ba:57:ab:ef:98:6d:
95:99:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:05:22 2025 by rpki-client