
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: +fFAmAvBz06RvJ8Ku+n1S2gwYxp6W2dL0CF5JdjYh8A=
Subject key identifier: 4D:88:06:45:87:1E:18:AD:8A:D5:27:8B:9A:79:C4:7C:E3:9F:05:85
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 01965CF19938697166E4E30392D25A0830BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0CC9
Signing time: Tue 22 Apr 2025 10:00:59 +0000
Manifest this update: Tue 22 Apr 2025 10:00:59 +0000
Manifest next update: Wed 23 Apr 2025 10:00:59 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: Cgdga5zKXZAN4FuRpHFssSvCuZ0w8RfmohagMKzEWCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:99:38:69:71:66:e4:e3:03:92:d2:5a:08:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Apr 22 10:00:59 2025 GMT
Not After : Apr 23 10:00:59 2025 GMT
Subject: CN=4d880645871e18ad8ad5278b9a79c47ce39f0585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:d6:2e:d7:0e:31:83:56:bb:53:49:c3:6e:
f4:7c:c6:15:fa:d0:aa:b8:73:f0:2c:4a:f4:da:71:
02:7c:3c:6d:3e:01:2a:60:4f:d9:39:e9:00:6a:f5:
73:64:18:6e:20:9c:09:64:32:19:a9:78:5b:c5:cd:
e8:13:4e:d9:21:c9:47:53:df:e7:06:81:92:0d:39:
c1:96:75:2f:ea:9a:90:b7:cf:d9:f8:86:d9:45:7e:
b3:66:81:a0:59:48:14:c4:06:0d:81:7a:f0:be:77:
35:1c:ae:c8:57:cf:ae:67:ce:1c:88:72:73:0e:64:
2b:43:73:5c:b4:df:89:e6:1b:13:ca:62:ee:21:06:
c7:36:3d:9c:a9:1b:06:41:47:62:f3:01:0a:14:6e:
51:77:4b:3d:ed:5d:59:9f:55:a2:10:14:3a:07:1c:
c8:5d:86:71:5f:d8:f7:85:7e:29:ac:df:06:22:c0:
8f:cb:04:11:8f:25:3a:68:1d:67:10:6e:30:d7:6b:
60:42:e0:76:2c:5f:16:34:97:04:98:49:cf:5b:03:
b0:5f:f3:7f:f0:bf:bb:41:9c:e5:8c:05:8a:98:21:
b9:13:02:da:97:2e:4a:ba:d2:f4:ac:13:58:e3:d8:
9d:8f:4a:a3:ef:d4:14:53:0d:5d:85:93:b3:48:f9:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:06:45:87:1E:18:AD:8A:D5:27:8B:9A:79:C4:7C:E3:9F:05:85
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:8a:50:2d:dc:2f:c9:ab:aa:a5:ca:a0:57:9a:b5:00:6a:
71:d0:8f:ad:5f:19:ae:4f:16:f9:e6:11:2b:94:ae:ac:1e:66:
55:13:a9:11:4d:68:21:03:c9:3c:b1:1d:9c:68:ef:ef:36:43:
96:aa:bc:2c:fb:f8:b6:e0:c3:9a:fc:07:39:ad:37:33:1e:e4:
39:07:0f:9f:63:a6:4d:a0:1c:6d:24:69:9b:88:45:c1:18:40:
06:f0:2f:ae:48:d2:71:3a:72:fc:25:73:b6:a3:b4:a6:a5:07:
ec:38:b4:79:c8:6f:fc:89:21:e2:f0:a2:5d:e2:1b:67:e3:b9:
3c:68:42:aa:14:36:34:d6:f3:86:11:e2:a5:68:85:5f:cd:21:
26:2a:6d:49:e4:08:ea:9b:5a:1f:8d:8b:17:a4:71:db:b0:85:
ce:a1:2e:3a:08:bb:46:b5:c0:8e:32:4f:17:ac:3c:1d:ae:e8:
08:0e:72:af:b0:cf:a4:67:cc:ab:79:17:55:27:2c:64:3f:c3:
79:ca:fe:c1:4e:b0:cc:66:5a:95:f2:66:57:62:7a:e0:4e:70:
7f:f2:b7:6a:4d:2a:e7:01:b7:82:a3:c7:dc:70:16:b0:ff:13:
d4:da:a2:ac:ab:a6:8e:a5:2c:8d:08:7e:05:13:94:66:f9:14:
49:da:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:57:13 2025 by rpki-client