Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: QMhnX8o4QrsYTKq18GDufAdm3K2sq07eFA6fDiv9LJk=
Subject key identifier: 6C:35:9F:B1:10:DD:85:FB:DD:6E:5F:79:C7:9F:3F:ED:B8:27:E3:A7
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019655A61492CBC97F5D782D2FD55FBBA0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0BE3
Signing time: Mon 21 Apr 2025 00:01:09 +0000
Manifest this update: Mon 21 Apr 2025 00:01:09 +0000
Manifest next update: Tue 22 Apr 2025 00:01:09 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: HbL7ADcLm37fPOn4B6zbgZMVq+H2lZzffrT3bDu1OLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:14:92:cb:c9:7f:5d:78:2d:2f:d5:5f:bb:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Apr 21 00:01:09 2025 GMT
Not After : Apr 22 00:01:09 2025 GMT
Subject: CN=6c359fb110dd85fbdd6e5f79c79f3fedb827e3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:c2:fb:13:3b:52:17:98:c2:cd:e3:dc:ae:
c1:ba:db:10:32:34:61:f3:b9:ed:7c:85:0e:1b:52:
91:c5:f0:f3:7d:55:c2:75:00:5a:bc:01:25:85:cb:
8e:03:fe:59:6f:8c:6f:4b:eb:12:2e:19:86:48:8a:
a1:17:35:c9:9b:25:19:5a:00:89:df:63:98:f5:31:
6b:0b:0f:f8:6e:69:2f:4c:d2:a7:bc:96:90:ee:7f:
53:fc:cb:e9:b0:30:62:a9:db:55:49:98:a6:9e:5c:
af:ef:02:5a:08:d1:35:46:b4:4b:55:8d:7b:42:0a:
79:f5:71:12:f8:9e:d5:4c:af:6e:9e:a9:62:2a:10:
a6:6d:ba:a2:58:5c:b2:6b:67:69:08:32:c5:ff:56:
27:99:d8:18:f2:b0:da:bf:dd:bd:05:17:33:91:05:
3b:1f:7b:68:44:1a:c5:a6:7e:31:00:39:ca:c3:11:
d9:e4:bb:bf:c1:03:80:ff:4f:90:3e:2f:63:aa:2a:
49:c1:a6:dd:bb:94:08:39:0d:34:dd:11:b6:07:45:
0d:a4:19:70:f5:0e:9c:48:8d:7f:cd:56:3f:15:eb:
4e:ef:8c:e2:f0:40:b5:aa:30:cc:64:3c:db:f4:d1:
a6:ba:48:e0:c9:cc:b4:53:34:28:55:1e:80:e8:30:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:9F:B1:10:DD:85:FB:DD:6E:5F:79:C7:9F:3F:ED:B8:27:E3:A7
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:17:ae:fe:f0:01:f5:56:1d:04:c0:93:ea:cc:46:3a:4f:04:
f5:af:62:19:c3:cb:7c:d2:50:e6:1b:0b:74:ed:da:fe:c7:fd:
f5:34:8d:b7:d5:49:7b:fe:4b:96:43:4b:ec:b6:1c:0a:8b:df:
ec:14:58:92:e7:5a:a2:0d:80:a5:73:2d:7d:7e:a3:12:25:76:
fd:72:c5:e4:97:c6:53:58:27:41:ef:26:75:fe:2f:bb:93:8d:
55:6e:47:b6:52:01:89:9e:8e:ee:5c:f6:39:c4:5a:a5:17:18:
2f:de:b6:9e:00:12:aa:53:81:15:1f:ed:15:2b:31:54:02:de:
b7:bd:e8:bb:87:c6:57:68:d9:08:d7:d7:da:4c:6a:37:28:0e:
4f:31:52:78:76:ac:28:b5:82:c5:8e:9b:c3:30:56:a9:a4:f1:
4d:f1:bf:a8:c2:09:ca:37:f1:82:c5:ea:dd:33:3a:50:e6:a9:
a4:d9:91:79:d7:d9:89:99:85:e1:48:1c:22:9b:76:14:b8:f3:
31:df:62:c3:55:d7:d4:19:98:29:02:1c:a9:ca:a4:ae:66:46:
d5:d6:66:ed:fd:f3:11:69:d0:f5:8b:7a:1e:1f:f3:15:77:62:
f5:fc:cc:0e:b3:c5:49:10:f4:08:67:6b:cd:1d:32:28:89:ff:
ca:5e:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:17 2025 by rpki-client