Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: HZuAUVjjGn0E+Nb5+yHse0F5iGLrpWPE8ht0I6itU0I=
Subject key identifier: 63:13:40:25:13:7E:B8:E9:6B:37:B3:9B:00:A2:2B:B9:B4:33:69:20
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 01968F955D65DC213DA1D77E650A1E64CF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 0986
Signing time: Fri 02 May 2025 06:00:52 +0000
Manifest this update: Fri 02 May 2025 06:00:52 +0000
Manifest next update: Sat 03 May 2025 06:00:52 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: v47ErEsnqLsGJHNNzO8KNvST/C+5vBV/6Dx8vqmDqAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:5d:65:dc:21:3d:a1:d7:7e:65:0a:1e:64:cf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: May 2 06:00:52 2025 GMT
Not After : May 3 06:00:52 2025 GMT
Subject: CN=63134025137eb8e96b37b39b00a22bb9b4336920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:49:ff:27:42:1b:e2:4f:e1:12:4d:61:26:
be:a7:cc:74:8e:f9:da:eb:11:e7:51:b1:32:2d:b3:
5c:e1:7d:49:07:f1:8b:fe:c9:74:aa:27:8c:cf:83:
81:f3:42:21:73:3e:b6:c4:12:cb:63:00:95:5a:57:
21:f9:46:25:e9:9a:04:0a:2c:86:41:eb:8b:1f:e9:
95:5a:29:98:81:ee:69:5d:b7:df:55:8d:ca:d7:d3:
cb:67:91:8b:e1:b4:b6:a3:e0:3d:b3:07:f9:b1:53:
5f:cc:df:92:29:1b:f7:70:e8:f9:05:ad:7e:e8:fa:
dc:0f:9b:36:87:e9:5d:39:b3:24:e0:b6:ad:fd:09:
cc:ce:f3:ce:69:79:54:bd:c8:08:8e:82:55:3e:29:
8a:9b:8b:3d:48:57:ff:51:3b:9d:5c:0b:2f:16:4f:
58:56:57:ae:62:a3:c1:f7:13:c8:09:a2:a9:83:bc:
e9:be:5f:c1:ef:77:58:1f:20:42:42:59:18:69:95:
3d:fa:30:02:8a:23:a0:8c:57:c2:04:4a:e2:c0:78:
04:5d:e2:0c:79:8a:eb:37:47:51:9d:8e:c3:dd:8f:
78:ff:72:57:bd:21:75:d3:89:c6:b7:0c:ef:e3:ea:
37:30:31:f4:56:05:13:68:63:66:c5:ce:73:4c:51:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:40:25:13:7E:B8:E9:6B:37:B3:9B:00:A2:2B:B9:B4:33:69:20
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7e:77:cd:21:79:84:37:16:ea:c5:94:24:ca:50:d8:64:59:
7a:7b:3e:60:d3:b0:54:54:bc:a6:c8:00:35:41:f2:9c:de:b9:
ad:53:b2:fb:5d:92:fa:c4:ce:ef:32:d1:ff:2e:f3:9c:1b:c8:
0b:e8:a0:2f:63:6b:14:74:79:aa:d7:13:be:1e:98:13:58:8c:
3c:e0:29:0a:10:a2:69:4a:4a:3e:5b:78:b7:9f:a9:8a:d6:47:
05:1f:46:6d:ac:c7:c0:9c:5d:97:95:8b:d3:55:82:de:c2:c7:
93:84:08:38:11:2c:35:5f:95:e8:2c:b3:c4:d0:36:27:8c:65:
95:84:77:0e:73:a7:36:17:db:b9:3c:85:73:8e:9e:89:8e:ea:
7c:fa:c6:a0:a2:3f:b8:f4:ee:a8:c7:0f:23:55:e7:34:9c:d5:
1c:69:f3:86:ed:dd:15:95:ea:f2:10:de:09:cd:68:b1:37:ea:
d9:79:32:a0:e5:1f:dc:cc:6b:7d:b2:e1:28:70:57:4c:4c:40:
d1:2f:c4:f5:58:f1:c8:b1:96:a5:ee:22:c5:a7:58:e2:34:dd:
8f:db:7c:ba:7f:da:f6:2b:a8:da:f3:6d:0e:79:d8:a6:67:59:
12:d7:a7:c2:c2:7e:33:ff:85:72:33:dc:f6:60:f5:8e:4b:58:
ed:eb:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:35 2025 by rpki-client