
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: Ofu9M81H7NyeYE1YBBIhsNNw00ni52v60pq8ZivfKJA=
Subject key identifier: 7C:3C:7B:84:76:E6:9F:CC:CA:78:13:69:C2:83:00:7E:C2:BE:37:89
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 019676434BF1F9331F9685EB34D5821DF14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 2F
Signing time: Sun 27 Apr 2025 08:00:43 +0000
Manifest this update: Sun 27 Apr 2025 08:00:43 +0000
Manifest next update: Mon 28 Apr 2025 08:00:43 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: 9f3TA4glL+06WRtmRscgAlRuH9JKkXr/suMjEQNZ52c=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:4b:f1:f9:33:1f:96:85:eb:34:d5:82:1d:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Apr 27 08:00:43 2025 GMT
Not After : Apr 28 08:00:43 2025 GMT
Subject: CN=7c3c7b8476e69fccca781369c283007ec2be3789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:ad:f1:b4:ff:a1:9f:78:b4:ac:78:ca:15:
ba:c3:c9:9a:dc:a6:0d:ca:7e:7e:4d:bc:e9:54:19:
e6:74:6d:e7:e1:26:40:fe:c7:ab:9a:5b:63:25:9b:
62:46:f2:7b:60:6c:a3:45:a5:43:ab:e4:5c:f7:85:
05:1b:5d:4c:2b:02:b5:0e:6f:8c:5d:5f:e9:41:73:
5b:72:33:bd:80:84:e7:93:23:29:a5:e4:b0:0c:64:
12:53:b6:d6:27:5b:18:2b:1a:d2:4f:a4:09:46:67:
c7:d0:d5:bd:6a:07:ef:43:6b:e0:25:5a:d4:64:5f:
86:cc:15:77:fd:9d:76:68:76:fe:42:d1:0f:7f:e7:
b9:24:c7:e4:b8:d4:21:c5:db:be:52:c3:f6:0d:e8:
ad:9b:24:54:ef:f1:1f:24:7f:e6:be:65:ff:37:f7:
aa:8a:53:11:c2:ce:5d:6f:d7:e7:d5:ff:9a:a8:7d:
ca:e1:12:5b:3d:5a:96:eb:09:4c:2b:b3:a3:e3:3d:
cd:8b:36:30:dc:82:c0:07:c9:e0:9c:c0:44:54:04:
76:aa:38:3c:17:33:6b:9e:5c:29:73:85:0a:b1:50:
c1:a3:8f:33:40:6e:d9:36:ba:16:db:45:28:e8:bc:
d9:fa:4a:69:c9:ea:a3:db:86:fe:cb:99:54:45:0b:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3C:7B:84:76:E6:9F:CC:CA:78:13:69:C2:83:00:7E:C2:BE:37:89
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c7:f4:4f:22:64:54:df:86:95:22:ab:17:8c:45:a9:56:1b:
83:5d:4c:3f:3b:27:89:c8:58:c4:89:ab:f5:47:5b:f2:29:e4:
22:7c:65:d6:0f:2c:33:a0:e1:9d:2b:68:23:22:6d:3d:60:65:
57:32:4d:3b:24:b6:63:d6:aa:54:14:1c:45:47:a3:92:0c:e9:
c3:d0:ce:e7:9b:fc:4a:0a:b6:e7:3e:c0:11:11:3a:c1:99:d3:
f3:81:79:b5:62:3c:dc:9a:f0:4e:ab:61:a0:06:66:bd:ba:69:
aa:a7:64:b6:38:b2:d2:17:a5:73:21:e4:a9:a6:f0:ad:87:f8:
a7:d8:bc:8c:79:2d:80:1d:c1:3c:00:74:e1:30:e0:7b:1f:fe:
b4:f2:97:2e:a6:57:33:ca:7f:7f:f8:66:72:02:90:e2:7f:c7:
74:de:3b:bf:f4:dc:a1:dd:e5:76:df:b6:c3:6d:ba:fb:eb:3f:
3a:61:40:18:98:8b:6a:fd:3e:74:ce:32:a5:74:2c:f0:7c:57:
7c:69:08:71:5e:86:e1:fb:5a:37:32:3e:aa:da:cb:7b:ea:41:
1a:52:60:21:95:a3:ee:a6:ef:a3:ff:da:f6:2a:52:f5:90:4d:
fc:49:ab:9c:ec:58:c6:4b:e3:80:72:24:33:6e:be:6a:2c:9d:
dd:43:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:58:21 2025 by rpki-client