Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier: UdTTY+6SmuveN3m+6USUVx5KkV+Ax8fb4sfvEM4QDZ0=
Subject key identifier: B0:0D:37:58:1B:29:FD:17:2A:74:39:D4:26:95:63:FA:8E:D7:06:57
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 01967C45E8F8499EF62209B9DE255EA2B4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number: 09F1
Signing time: Mon 28 Apr 2025 12:01:18 +0000
Manifest this update: Mon 28 Apr 2025 12:01:18 +0000
Manifest next update: Tue 29 Apr 2025 12:01:18 +0000
Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: aoS/hHAVaGwlONpNEcSZxgjG1ooc1BhBd4jtwlJWX7A=)
2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:e8:f8:49:9e:f6:22:09:b9:de:25:5e:a2:b4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Apr 28 12:01:18 2025 GMT
Not After : Apr 29 12:01:18 2025 GMT
Subject: CN=b00d37581b29fd172a7439d4269563fa8ed70657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:09:c9:a5:b9:fa:cd:aa:47:ef:ac:53:69:
b7:0d:32:f2:48:38:55:19:0a:0f:e2:75:36:dd:cf:
45:38:f5:a8:b6:a9:4a:dd:90:b3:f6:16:f2:88:fc:
89:2f:dc:f3:96:ac:22:d3:82:62:4f:13:d9:fb:c6:
3e:f9:1f:b8:cd:fe:ed:12:5b:1e:ee:d6:be:66:c9:
14:0e:6c:df:c2:e0:bb:ed:eb:5d:00:60:02:34:61:
11:8e:e3:ff:f1:06:d4:5a:73:13:51:a7:f0:de:98:
5b:78:c0:a4:0d:1d:38:46:ee:70:14:b2:48:0b:e4:
a0:62:ff:46:a7:7f:4f:fc:33:49:0f:d6:bf:71:87:
cc:b4:f6:47:d6:03:1e:fe:fd:1d:6b:18:bb:bb:7c:
0c:e7:24:79:73:b4:f3:2c:f6:2c:77:ed:31:5b:50:
0d:bb:13:f6:3a:a5:1c:c7:86:14:6b:b8:e9:ef:58:
8e:fd:2d:7d:cd:f6:38:17:c5:de:05:71:c2:02:88:
39:f5:2b:66:bc:ae:1f:44:92:7b:46:93:68:08:bd:
b4:5f:4e:7b:99:a0:a7:53:c8:6b:dd:bc:52:83:fe:
6e:f8:4a:bf:54:1c:11:e1:eb:ea:11:57:ee:66:60:
32:ed:ef:db:fd:87:01:90:66:84:b5:8d:f0:3f:0b:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:37:58:1B:29:FD:17:2A:74:39:D4:26:95:63:FA:8E:D7:06:57
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5e:5c:7a:05:6f:57:19:48:5b:4c:56:59:a3:4c:f1:92:04:
cf:6b:ab:64:37:69:cb:84:9a:a4:11:2e:31:6a:99:ce:a5:1c:
00:06:f4:c4:c2:da:55:a0:08:ce:a2:a0:5b:d4:90:b7:66:7a:
98:53:77:3a:af:10:c8:e8:9d:ef:48:ec:b4:a0:9d:f9:65:25:
a0:c2:0e:2f:0d:a2:e1:d7:e1:72:51:96:3c:37:29:e3:e7:86:
26:ea:a8:30:1e:ec:1c:df:72:fe:41:1f:68:83:27:ac:ec:4a:
a3:72:25:cc:35:2a:cc:65:d5:d3:15:f7:84:69:c1:ee:78:3e:
2c:4a:c3:ec:2c:85:34:b0:d1:52:d4:11:ae:79:8d:af:d5:33:
d1:55:7f:37:48:63:d6:8c:a0:05:a2:99:a9:f4:39:85:52:61:
a0:bc:b1:bd:c0:69:fe:fa:73:4e:49:97:a7:bb:c4:f9:d4:ee:
3b:ec:3f:7c:4b:32:77:48:85:9b:58:55:43:30:c2:66:0c:30:
e0:1b:bf:b6:7a:34:86:a0:75:e3:d3:e5:96:c4:5c:8f:68:0a:
e5:81:37:a1:03:f7:d5:f2:0f:29:82:ba:42:f5:5f:fe:ca:92:
60:42:20:05:4c:96:4f:8f:ff:19:2e:f9:17:d6:09:2d:77:ee:
d8:44:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:56 2025 by rpki-client