Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier: nk4zMKz9zu7ZfagiAnwH1AqUwb+BhMRmEe5eOWZUX6g=
Subject key identifier: 46:5F:77:B4:4D:60:00:77:BF:AC:D4:4A:77:5F:4A:35:3C:7B:7E:3A
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial: 01965E03D1D97160CD98A374CB3D5D6A9D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number: 0F0C
Signing time: Tue 22 Apr 2025 15:00:30 +0000
Manifest this update: Tue 22 Apr 2025 15:00:30 +0000
Manifest next update: Wed 23 Apr 2025 15:00:30 +0000
Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: YCNqZX7RdlEy2jdnDHaSxo23IPgNUr74Y1o9LaOMSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:d1:d9:71:60:cd:98:a3:74:cb:3d:5d:6a:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Validity
Not Before: Apr 22 15:00:30 2025 GMT
Not After : Apr 23 15:00:30 2025 GMT
Subject: CN=465f77b44d600077bfacd44a775f4a353c7b7e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:fd:48:15:c2:c0:a9:43:b3:2d:e5:e8:33:
5e:3a:b8:98:15:1d:eb:63:1b:31:f7:2e:af:ab:15:
e6:e4:43:9f:6f:7c:4d:f6:c5:cd:7d:47:4a:45:40:
11:02:74:c7:b8:02:76:86:03:37:bb:b3:6c:38:f1:
03:8f:28:e7:3a:71:31:c5:03:f2:8e:f1:0a:73:b1:
70:47:21:df:8d:ab:82:2e:66:40:c9:41:f7:6f:37:
d6:90:d0:0c:31:00:ed:d5:f1:d3:12:6a:b5:6b:63:
f9:95:93:94:60:46:69:1f:b7:35:e6:19:21:85:95:
7f:40:80:1a:01:53:39:59:d4:98:42:19:77:6a:9f:
5b:9f:31:4c:85:b2:b8:ad:ec:42:70:14:10:da:0c:
85:e3:f7:cb:77:34:57:78:97:eb:47:3d:a4:fd:c1:
31:ce:4c:be:71:5c:43:b7:e6:88:77:a1:00:e6:97:
9a:91:a9:cd:a8:a2:16:84:f6:37:78:c4:5f:5f:0e:
f7:4b:23:17:47:5f:40:4e:24:cf:9b:5a:ca:3f:f8:
e2:18:21:b1:1e:44:8c:78:64:f4:38:45:e0:61:ec:
21:39:a3:5e:d6:40:ed:a2:86:63:62:3c:dd:c4:5d:
a5:6b:fa:4e:3f:03:1d:09:17:d3:1c:54:62:5f:38:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:77:B4:4D:60:00:77:BF:AC:D4:4A:77:5F:4A:35:3C:7B:7E:3A
X509v3 Authority Key Identifier:
keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bc:8e:ef:b3:2b:af:0b:52:30:76:69:ba:00:6c:38:f7:f7:
e9:bb:30:11:05:0e:63:ae:71:ea:89:f7:3d:2b:10:ac:29:07:
dd:f7:58:b3:e5:08:e3:9c:01:de:fb:ee:62:d8:a3:56:32:f5:
e7:09:54:d4:31:9d:d5:24:3f:9b:b2:80:92:d0:0f:f4:2b:12:
1c:8f:1c:de:f3:cc:bb:d5:e0:34:ae:4f:b4:88:d9:13:48:98:
d0:77:e1:09:21:2c:fb:32:c2:78:a8:50:2e:51:7f:a7:64:06:
41:c4:05:cb:7c:e0:91:ca:1f:7a:68:e8:78:b4:2c:1d:26:a1:
ec:f1:b2:05:ef:5d:9e:d7:e0:93:1e:41:c0:44:07:64:b0:c1:
b6:25:df:46:53:69:ac:8b:d3:87:2b:5a:9a:26:3b:40:61:5f:
07:7f:cc:64:9b:5e:11:24:e5:21:f3:04:d8:2c:75:f6:b2:17:
82:64:b0:4e:b8:39:dc:87:a6:71:a2:14:3e:c7:85:f7:4e:df:
5a:0f:c3:ad:df:70:2d:a7:dc:de:be:a2:c4:3e:2e:60:26:c7:
5b:05:b6:35:8d:9d:9c:de:08:5b:5d:af:c2:69:97:4f:02:88:
04:05:25:a7:3f:2f:5e:97:76:10:31:f9:fa:f0:e0:7e:ad:37:
cc:74:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:52 2025 by rpki-client