Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
File: vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json)
Hash identifier: ydaGjz3FelfhRDXMDGoeXwZJuXNQW51UPmH/CbvUiWQ=
Subject key identifier: EC:FB:A4:70:48:B0:71:1C:BD:60:FE:29:C4:A9:EE:FF:2D:7E:7F:B1
Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
Certificate issuer: /CN=bcf234c0444416b8852fb347878ad376d0818d64
Certificate serial: 01965C4C2A6CC58776E9760BEEAD7030247D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
Manifest number: 088C
Signing time: Tue 22 Apr 2025 07:00:17 +0000
Manifest this update: Tue 22 Apr 2025 07:00:17 +0000
Manifest next update: Wed 23 Apr 2025 07:00:17 +0000
Files and hashes: 1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: K6nNhipsYLr/3kUrGsgs2bokI/0WEBNuAJmy+TwlnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:2a:6c:c5:87:76:e9:76:0b:ee:ad:70:30:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64
Validity
Not Before: Apr 22 07:00:17 2025 GMT
Not After : Apr 23 07:00:17 2025 GMT
Subject: CN=ecfba47048b0711cbd60fe29c4a9eeff2d7e7fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:22:d2:a2:c6:bf:4d:b4:e5:87:49:95:5d:
51:f7:ee:67:aa:d4:46:b3:59:22:49:b0:77:9f:81:
15:3d:07:9e:33:79:c0:ed:70:74:9b:b7:14:e8:97:
60:58:62:bf:f1:4f:c4:11:73:65:12:ae:e7:df:b8:
43:96:2c:56:f7:5c:e4:74:6c:c6:eb:32:10:2a:d6:
6d:d8:0b:a5:8b:6d:86:a9:22:f6:b0:88:51:6f:52:
02:bf:1e:b2:f2:77:dc:b8:2f:13:03:c7:dd:46:93:
8f:f4:db:99:55:55:16:0d:c9:d8:80:36:b1:68:bf:
c5:c3:cb:3c:60:d1:bc:aa:fd:4a:1b:cb:28:f2:6c:
30:73:85:59:b7:36:9d:9d:bc:25:7a:22:e9:63:ba:
16:66:f0:0a:4e:cd:f6:be:4d:31:3a:87:4e:8a:73:
d5:17:fa:ee:4c:c4:77:17:e0:bd:c8:f0:56:4e:ca:
78:ed:a8:11:47:5c:93:96:9a:f5:e0:bd:4b:9e:e4:
d5:5b:8d:ad:d4:dd:e6:ef:6b:5d:8c:76:a6:94:ae:
c8:dc:90:d9:fe:09:8a:92:e1:c3:0b:2b:5d:d0:30:
48:e2:37:ae:0f:e1:0a:9b:54:c5:c9:cb:2a:6b:3d:
f8:9f:95:a4:85:f3:81:20:a7:7b:7b:70:cd:b7:cd:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:A4:70:48:B0:71:1C:BD:60:FE:29:C4:A9:EE:FF:2D:7E:7F:B1
X509v3 Authority Key Identifier:
keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:e3:a3:8b:e7:a8:fc:26:7c:4a:8f:66:f1:e1:32:62:a6:
bf:47:d4:92:5a:1c:1a:87:a3:92:60:b9:a4:99:35:39:b1:a0:
07:0f:83:e0:77:c7:49:39:35:ff:8c:a6:39:11:83:8e:e9:9d:
92:57:72:2b:b8:0e:c5:61:4e:99:ec:c8:34:10:7a:ef:cc:06:
14:aa:f1:63:d6:49:a3:c3:c8:b4:55:4a:b3:41:ee:39:ff:f6:
41:cb:1f:d9:3b:27:fd:c6:41:bb:75:d6:59:05:f6:19:fc:bc:
b6:a8:0a:2e:7c:42:91:63:58:20:77:2f:ec:42:1e:cb:a9:0f:
7a:75:d8:59:ed:71:62:b7:29:fc:95:ef:52:a7:5c:89:c1:3a:
7a:88:49:67:ad:6b:b7:31:1a:6f:f6:c9:73:68:20:b6:8c:e1:
3c:e4:26:40:01:0a:84:b9:18:13:d5:93:43:5c:24:1f:45:0f:
6e:bb:0d:46:84:8a:65:c9:3f:9d:96:1a:53:7b:35:54:50:16:
89:2c:94:86:9a:46:39:5f:b2:75:00:4d:a1:d0:62:71:e4:f4:
6d:99:2f:d7:da:c0:30:ed:ef:11:d2:bf:0c:be:20:be:9e:30:
26:88:e1:9a:15:fb:ee:0e:57:42:96:0c:56:04:d5:97:de:9a:
f6:4e:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:54:44 2025 by rpki-client