Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: Ui2G+Cg2blzHR8GhUgmADSsVc/Q81kCZSpagQpkD3jo=
Subject key identifier: D3:72:8B:E4:B9:21:09:81:E7:07:46:B8:D4:BB:3E:61:E9:B7:5A:E2
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019653B7D24B944EEDD480C22D86FB447519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 08A0
Signing time: Sun 20 Apr 2025 15:01:17 +0000
Manifest this update: Sun 20 Apr 2025 15:01:17 +0000
Manifest next update: Mon 21 Apr 2025 15:01:17 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: olvijyCqhp8YtA4G9XaTNH2v+Gh14lTYXdxBBcRLLEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:d2:4b:94:4e:ed:d4:80:c2:2d:86:fb:44:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Apr 20 15:01:17 2025 GMT
Not After : Apr 21 15:01:17 2025 GMT
Subject: CN=d3728be4b9210981e70746b8d4bb3e61e9b75ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:4f:c4:c8:0e:e2:40:05:6b:2f:52:f2:f5:
67:9d:0b:7e:34:0e:dc:9b:23:ec:50:1e:93:28:93:
2e:b2:e4:1a:c5:99:a0:03:61:22:48:a2:37:a8:b0:
f2:15:18:6c:50:2d:bb:e2:a8:27:db:0a:28:fe:db:
4b:9b:92:96:48:ff:5c:f9:6c:87:8d:b8:72:df:e0:
0d:ba:6b:9a:c2:c1:6a:7c:de:7b:34:5d:ec:4d:2e:
be:7c:eb:ec:a1:a0:a4:a4:10:cb:da:19:80:62:d1:
68:a8:27:7a:6d:47:dd:06:e6:1c:95:f8:a3:74:c5:
e7:60:48:63:04:72:4b:7d:e2:bb:88:05:cd:ea:b9:
60:c4:42:17:15:3c:e4:7e:26:0d:21:f0:bb:14:c8:
22:5e:bf:39:d6:53:fd:33:25:ad:67:fb:c1:79:13:
75:f4:e3:cf:eb:08:c1:3e:84:ab:6e:d0:fb:75:3f:
0d:3e:11:e9:9d:9b:8d:ae:93:42:2c:c2:6b:49:02:
5b:81:2d:57:03:64:39:4c:39:cd:20:af:ae:2f:32:
c9:12:9b:81:e5:40:e6:a0:35:cf:2d:54:d8:51:2e:
7e:65:12:a3:5b:0e:ef:b5:b8:8f:65:db:80:c5:f2:
f3:91:91:82:88:23:b9:b2:d1:6c:2c:e0:51:57:2b:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:72:8B:E4:B9:21:09:81:E7:07:46:B8:D4:BB:3E:61:E9:B7:5A:E2
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a1:b3:0f:1b:8d:dd:0e:d1:4d:a6:1d:ca:f9:3c:fc:8a:32:
75:c4:36:a2:1f:2e:9b:4c:42:69:5f:58:ee:e0:1e:e0:38:4a:
db:b7:d0:bc:29:23:31:cc:e1:03:d7:d0:d3:22:44:58:c5:11:
85:ff:b2:b7:e3:af:69:61:bd:43:88:5c:7c:b8:f5:3b:6b:65:
fb:a2:92:38:93:1a:9e:f9:2f:20:23:ad:bd:ae:95:76:54:f0:
b6:b7:fc:21:05:93:00:40:e0:65:80:89:95:09:4c:c2:d6:73:
5d:a6:ac:bc:81:60:23:9a:47:33:57:8b:fe:72:34:6b:e1:77:
cc:7e:d3:c6:62:10:73:ff:11:fd:9b:5f:85:96:2c:d8:27:94:
dd:2e:08:0d:a7:a8:9b:b3:80:fc:02:2a:39:ba:8f:21:81:7d:
a9:40:90:0c:85:d7:58:be:6a:3f:e3:c1:9c:0d:74:08:35:73:
8b:26:84:af:f0:56:e8:1c:75:c8:73:1f:f9:a0:3c:43:1a:2e:
07:6c:92:02:0c:23:67:b3:42:37:6e:1e:b4:65:09:82:6f:de:
11:e8:1e:fe:1e:85:bc:2d:98:a9:c9:33:57:4e:9f:8a:99:a5:
79:0d:45:65:f5:37:a9:cd:3f:d2:4e:ce:95:94:54:57:3c:fb:
cb:0f:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:14 2025 by rpki-client