Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: gzjad13ZSglMs7NTGfjSJtjR/f2LLE57Zg37UBZm38s=
Subject key identifier: 62:BF:00:9F:57:B6:1D:D3:26:4C:11:31:4C:6F:4F:8B:9C:70:A9:E5
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0196553835AC9EB1B8949CFBD72332C81DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 11CE
Signing time: Sun 20 Apr 2025 22:01:09 +0000
Manifest this update: Sun 20 Apr 2025 22:01:09 +0000
Manifest next update: Mon 21 Apr 2025 22:01:09 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: /3o7DYIZQ53DcXXkX5tZSWMfEQTRaAvctc/Omnu9cdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:35:ac:9e:b1:b8:94:9c:fb:d7:23:32:c8:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Apr 20 22:01:09 2025 GMT
Not After : Apr 21 22:01:09 2025 GMT
Subject: CN=62bf009f57b61dd3264c11314c6f4f8b9c70a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:66:eb:26:4b:ac:a6:af:e1:a3:41:61:ab:98:
2e:9a:68:ef:ef:1c:b3:4e:8c:4e:50:a8:22:11:8d:
46:f9:22:11:06:eb:fc:ed:1f:41:74:58:a4:b5:b6:
d5:87:99:fb:74:23:38:52:d5:51:7a:66:c2:87:dc:
5b:89:d4:77:29:51:48:a1:d4:b4:9c:19:f4:9a:f2:
15:63:0d:e2:e6:af:6c:f0:6e:8b:b3:14:76:b1:21:
f0:7d:36:ad:9b:44:17:54:d6:3e:a6:2d:77:b4:6e:
19:9a:58:ec:e6:d2:82:9c:47:2c:82:30:6f:c8:c0:
22:af:71:54:1f:52:58:1f:88:fb:06:f8:2e:85:9a:
dd:62:2a:8e:78:b3:a8:7c:4a:2f:11:89:21:da:ea:
b0:35:1f:a6:a9:68:aa:87:4d:fb:74:94:6b:11:29:
5b:97:0b:60:a5:2d:2f:cc:25:c5:b5:10:f3:c7:ea:
5e:78:2b:39:29:14:98:6e:f8:de:0a:4d:87:d9:d8:
2f:f2:a6:bc:98:cf:88:e6:40:d8:f3:62:d9:76:34:
34:96:04:60:aa:00:a5:3f:b7:e8:de:ac:58:46:53:
5d:f3:34:9a:3c:eb:5d:de:ef:44:22:14:a9:b3:87:
47:b2:b9:39:fd:02:6c:3e:06:6d:ae:95:3a:cb:da:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:00:9F:57:B6:1D:D3:26:4C:11:31:4C:6F:4F:8B:9C:70:A9:E5
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:99:52:82:2f:c6:62:40:d9:74:ba:dc:db:0d:db:99:25:0a:
0a:53:7d:ff:1d:3b:99:d3:61:76:99:64:43:ea:06:e1:21:5d:
fc:db:20:6f:c2:94:32:68:8a:98:69:26:e4:c9:c2:c5:a2:4c:
f8:e9:66:6b:d7:2c:9a:85:f1:56:1c:8f:7e:6a:66:31:37:ce:
87:b8:07:f3:b5:e9:1b:06:e6:9b:6b:c0:b3:f0:a0:bb:e1:6a:
44:c6:42:b5:10:d0:cc:b9:2c:62:6f:ef:79:70:66:67:23:92:
40:fd:c5:0d:9c:07:a5:16:2a:ae:8f:70:12:59:2e:82:a0:95:
e5:c2:00:4e:06:75:a6:42:1a:9e:87:cf:eb:7b:6c:2b:1b:e4:
b9:07:fe:98:5e:d9:90:72:56:4d:89:ea:25:06:c5:e9:57:3d:
22:f1:d6:aa:ad:40:b6:a6:77:2f:1b:22:a0:d7:a8:f7:ed:10:
8a:76:69:fd:60:da:ae:72:a2:0d:7a:25:a7:06:56:aa:ef:9b:
7c:c2:05:fa:01:3b:9d:ea:f8:38:b7:ac:21:84:c8:0e:47:e5:
2b:87:42:b6:48:80:db:43:a2:bc:5e:2a:39:7e:3b:6e:04:18:
0c:8e:2a:0b:19:42:cc:10:6a:e4:8b:f6:8b:e2:d4:4d:ab:51:
9a:16:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:39 2025 by rpki-client