Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: ODjAuNA45VkTG2ARNQ0u3I3iXaUtPOx3h+z/4ms+qCU=
Subject key identifier: 18:2E:28:41:BB:15:8A:95:D0:B8:4E:6E:C9:22:D4:F9:C3:01:C6:13
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 01965537C1736DEF218EEB9CC60523AE3F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 0170
Signing time: Sun 20 Apr 2025 22:00:39 +0000
Manifest this update: Sun 20 Apr 2025 22:00:39 +0000
Manifest next update: Mon 21 Apr 2025 22:00:39 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: +ouIMTOH1+W/MIX/uIomzgxDLs2EfBTh8VYXIP8ysg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:c1:73:6d:ef:21:8e:eb:9c:c6:05:23:ae:3f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Apr 20 22:00:39 2025 GMT
Not After : Apr 21 22:00:39 2025 GMT
Subject: CN=182e2841bb158a95d0b84e6ec922d4f9c301c613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:94:20:f1:15:ac:03:65:01:b1:af:c4:78:
b7:dd:2b:46:b1:3a:87:fc:ef:2e:f2:22:18:bc:88:
0a:46:ad:98:ed:e0:24:e6:78:50:51:54:5f:ef:ef:
8d:78:82:a7:35:99:1a:55:0b:36:3a:7c:c0:70:d7:
61:60:07:b0:c5:46:f7:45:d4:86:53:66:b8:9e:0a:
99:01:e8:20:9b:a2:13:30:a1:6e:9c:13:35:30:7b:
7a:32:91:9f:f4:fe:6a:41:2b:36:75:23:dc:34:43:
94:e6:ab:13:da:0f:42:1a:4f:42:5e:cd:eb:e6:3c:
ae:b7:ab:15:6d:5b:44:5c:7f:c3:97:5a:c0:a0:b8:
c6:80:09:6b:db:68:a5:99:58:bb:5e:f2:0f:49:a7:
3b:ca:17:aa:a8:06:96:8c:a5:d1:82:f4:13:95:5c:
8b:50:4c:80:05:18:23:98:13:5a:87:09:bb:74:e2:
1a:cb:c1:15:9b:d6:dd:51:ca:25:17:2d:3a:28:57:
0c:df:cd:ab:7c:10:9d:fb:85:0f:4c:82:fa:5f:98:
6d:6a:88:9e:58:bc:5b:01:f8:89:0e:8c:f9:b8:7a:
cc:c0:47:c6:44:47:36:25:25:2d:28:73:a8:b0:61:
0f:9f:21:af:cf:d4:22:97:33:66:c5:83:d1:62:95:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:28:41:BB:15:8A:95:D0:B8:4E:6E:C9:22:D4:F9:C3:01:C6:13
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:0c:88:aa:ae:3f:aa:8a:54:8b:5b:e6:f4:bc:72:46:14:
21:62:f9:b0:25:a5:f8:d8:7b:87:f1:68:7e:bd:5c:6d:1c:dc:
07:5c:ee:33:6a:85:10:9a:24:00:59:21:62:3f:fe:1b:41:a7:
99:10:72:69:2f:77:1f:06:23:7d:a1:8a:59:92:37:a2:89:b9:
23:ec:64:69:9c:f6:53:c5:3d:36:4a:c2:24:d6:89:53:9b:88:
2d:11:b8:44:6f:ec:ca:2d:33:7a:0a:0e:d6:9f:e0:60:dc:47:
38:40:7f:fe:52:24:5d:33:67:8c:71:af:08:6b:ee:a3:3b:42:
70:a2:45:21:d2:ff:79:f9:b4:38:10:22:2e:2e:f2:13:2b:ab:
25:d4:aa:13:ba:49:c5:ab:6c:a7:48:35:54:0f:5d:cb:3c:13:
aa:1a:d9:ec:f8:9a:cd:c9:ad:3c:3a:dd:a7:fc:a8:b8:e4:15:
06:d1:d0:3f:89:2a:59:a2:ed:64:ae:af:40:bb:4e:f3:34:bf:
7c:11:fd:bf:a2:a3:d7:87:39:58:68:dc:02:f9:df:06:8f:7f:
eb:1c:a5:dc:30:8b:da:21:d5:10:02:a6:ce:2b:5b:41:93:80:
3a:69:24:73:91:31:24:5f:cf:03:6b:51:1b:fa:08:66:83:66:
69:54:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:00:51 2025 by rpki-client