Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: XA2RMkctyJdQA9zw84LnU8AtV6fFbK9MPAi6r9DA3Qo=
Subject key identifier: B1:29:95:EB:A0:F1:AB:1B:F1:16:03:7E:3C:46:60:CF:20:61:99:F4
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 0196857F80BA23CAAEAFC12D4C87D91BA598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 0EDC
Signing time: Wed 30 Apr 2025 07:00:47 +0000
Manifest this update: Wed 30 Apr 2025 07:00:47 +0000
Manifest next update: Thu 01 May 2025 07:00:47 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: pU6OA/GqtO24mU0gxFiDoLqwZ2N18/Sm2emQcrt62Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:80:ba:23:ca:ae:af:c1:2d:4c:87:d9:1b:a5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Apr 30 07:00:47 2025 GMT
Not After : May 1 07:00:47 2025 GMT
Subject: CN=b12995eba0f1ab1bf116037e3c4660cf206199f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:11:a0:bd:40:cb:1a:71:19:99:da:f0:0e:
a8:07:12:ea:53:6c:d5:d0:a3:d0:ce:0f:97:6f:47:
9d:cd:1d:62:d6:22:20:03:62:0c:20:5f:fc:dd:29:
c4:63:75:ee:49:3a:64:e1:32:0b:5d:cc:18:c8:c5:
c6:50:b3:34:e9:c9:36:81:42:55:aa:84:97:8c:7b:
99:46:40:2f:0c:c9:99:17:24:fa:d6:d1:8d:7b:b0:
7d:34:63:bc:35:e6:47:98:a0:07:b1:02:46:81:47:
50:d1:fc:96:3c:e3:40:16:ed:e4:0d:f6:8c:84:9c:
f4:96:a8:81:e2:fd:c2:e7:95:a1:a6:4a:77:63:93:
a9:66:88:b8:39:0c:59:6a:df:44:20:d1:75:4f:7f:
9b:0c:10:ef:66:53:c2:dd:79:36:03:1c:9c:0f:9b:
f3:ad:08:29:65:21:70:b6:21:cc:3b:e3:95:a7:07:
f2:3f:5a:4e:ba:bf:fd:c4:3d:49:14:a1:34:e6:02:
76:e4:a5:60:f9:1f:90:bc:ca:28:c0:a1:2c:20:31:
46:3d:23:b1:f4:fd:74:dc:0b:02:30:72:3b:fd:f9:
39:d6:95:7c:e1:b9:e2:bd:50:1e:5d:92:86:32:c9:
f7:59:1d:75:f5:0b:d5:88:a0:b7:93:db:e9:75:68:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:95:EB:A0:F1:AB:1B:F1:16:03:7E:3C:46:60:CF:20:61:99:F4
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a6:47:fc:f5:47:22:26:97:4b:7b:8a:5e:08:73:0f:e1:7f:
7f:ff:51:bd:04:18:23:ee:31:b1:b6:85:00:3a:7c:98:e7:65:
ad:88:e9:93:ad:35:b5:4f:71:df:c4:67:d4:ad:c0:68:09:90:
5b:6b:48:e9:07:99:1c:96:c2:53:55:53:54:37:c9:ec:72:ca:
dd:f2:92:98:83:e4:07:df:4d:5e:55:b2:46:cf:1e:98:2a:70:
d9:83:1a:2b:dd:9e:e2:b1:49:7e:9a:9e:7e:9d:6a:e5:78:b1:
76:51:1a:27:ef:23:dd:01:3a:ce:b4:c8:d4:f9:71:c7:f9:1e:
2c:d4:c1:87:42:b7:62:b5:f6:0d:15:ae:f8:6e:ea:f0:f8:94:
77:65:1c:8c:6d:f4:c4:d1:2a:75:1f:af:bd:c2:b3:d8:74:aa:
4c:95:a5:28:e7:f0:11:0e:2d:81:54:2e:e7:39:83:98:ab:31:
48:86:67:3a:81:25:e6:60:2e:64:21:4a:f5:7b:5e:33:76:5c:
b2:d0:8f:d4:88:5f:e7:06:66:61:2a:03:dc:bb:cd:47:bc:9e:
bd:d1:e0:15:85:57:ac:ae:d5:4d:60:c7:5a:a8:8e:81:e4:46:
59:8c:67:06:20:0f:31:5d:cc:82:91:22:98:cd:ef:83:0d:ef:
5d:c0:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:26:45 2025 by rpki-client