Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: H0aL0qTRB2fLore03FCOI3TwhhqqEmIty6wGFFc3ymM=
Subject key identifier: F1:E4:C6:65:3C:99:9A:5E:B4:8B:ED:59:C5:2D:EF:D6:E5:78:AE:21
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 0196741E08C97C6C8074E0F664B0B2476366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 071C
Signing time: Sat 26 Apr 2025 22:00:47 +0000
Manifest this update: Sat 26 Apr 2025 22:00:47 +0000
Manifest next update: Sun 27 Apr 2025 22:00:47 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: YiDY8RuF9jwu/v9/td++L8n1zpEi7jOgc6Ev1Zvh2rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:08:c9:7c:6c:80:74:e0:f6:64:b0:b2:47:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Apr 26 22:00:47 2025 GMT
Not After : Apr 27 22:00:47 2025 GMT
Subject: CN=f1e4c6653c999a5eb48bed59c52defd6e578ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:37:51:e6:84:64:1d:1b:30:eb:e8:45:6c:
c0:02:f0:1b:18:8a:fa:f1:3b:2c:ba:32:6a:53:f0:
27:20:f5:d3:8a:71:02:10:28:f9:56:6f:7e:fb:c4:
2e:aa:55:d0:7e:26:a9:29:17:5c:9b:b6:1e:1b:48:
f1:5e:f1:8f:46:ec:e5:52:3a:2e:59:f5:91:55:79:
da:df:35:91:17:36:7a:5c:ed:dd:87:7c:ed:a1:64:
96:8a:88:83:f1:21:80:df:8a:40:f2:a7:26:e5:2a:
27:13:73:e0:05:ba:40:7f:e6:5b:a8:ed:7d:fa:09:
66:41:d8:09:ab:e9:28:ba:40:a1:9f:af:4b:36:3f:
0b:17:c3:ce:d9:df:6b:88:9b:26:27:17:bd:20:17:
d7:a3:63:c8:be:46:3e:61:5a:ea:75:5c:eb:00:78:
57:da:b8:d5:d1:06:b9:f3:5d:23:18:21:95:15:ce:
ef:e4:99:76:9e:49:2d:02:3e:47:5b:c4:5d:94:7d:
df:f5:21:3b:5a:67:29:df:13:76:00:05:91:cd:65:
7d:eb:c7:eb:1b:07:7e:4b:b0:fa:a9:42:81:e2:8f:
a3:a1:94:83:0a:c6:38:54:17:77:1c:57:b3:df:5a:
3c:da:74:9b:87:0d:df:05:41:41:00:a4:00:b4:da:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:C6:65:3C:99:9A:5E:B4:8B:ED:59:C5:2D:EF:D6:E5:78:AE:21
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:03:78:3e:da:91:a7:07:d4:c1:da:aa:fa:d9:f0:25:44:
9f:65:bd:85:0f:b1:14:b2:4f:60:f7:4a:97:b9:ae:bc:c6:ff:
84:8d:9e:a7:03:1c:a3:36:6a:87:39:24:f4:02:85:39:96:2f:
f8:a8:05:61:dc:b8:92:cc:b0:7b:88:31:ef:10:aa:42:6a:d3:
68:9e:d5:00:6d:3a:94:92:12:44:bc:e7:d2:af:3a:1a:df:46:
7e:b1:15:c1:95:e3:66:d2:35:53:eb:3b:f0:42:40:3c:72:95:
14:ed:e4:f2:6e:b5:e3:52:5d:fd:ed:4d:cc:aa:d1:6d:f7:fb:
a9:dc:b4:44:72:80:64:d3:62:f9:19:ed:33:0a:bf:14:c2:d2:
16:1c:98:36:f5:d0:2d:40:11:7b:bf:ef:71:6e:81:a9:11:cf:
a0:86:ec:88:8d:0f:6a:5a:39:92:43:33:78:d2:71:b4:ea:bb:
c3:9c:0f:9e:e6:73:43:78:e9:5e:22:be:a6:61:f1:07:33:34:
e0:e3:99:29:26:82:1c:d4:84:38:99:c7:3a:93:57:ad:97:eb:
67:82:0f:8f:f8:d7:31:cf:51:ce:ee:00:47:91:03:3f:26:45:
c9:34:b0:6e:ce:6d:ff:16:f1:86:8d:dd:3f:96:69:a4:95:d6:
28:1d:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:33 2025 by rpki-client