Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: sA9OHDy7NXg9Ib+qADryRWIvSqfizBRfLO5FDfFLRYI=
Subject key identifier: 55:A9:90:FC:61:3F:61:8C:A5:A8:7D:0B:E7:5C:6F:91:AB:CA:6D:33
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 019659828B051861C17B9CF4D2A4B0D266FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 117B
Signing time: Mon 21 Apr 2025 18:00:49 +0000
Manifest this update: Mon 21 Apr 2025 18:00:49 +0000
Manifest next update: Tue 22 Apr 2025 18:00:49 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: EHSj0h99ZXnaEbTlhOrvTBa2ZMntLXMyl4clUtRkO0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:8b:05:18:61:c1:7b:9c:f4:d2:a4:b0:d2:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Apr 21 18:00:49 2025 GMT
Not After : Apr 22 18:00:49 2025 GMT
Subject: CN=55a990fc613f618ca5a87d0be75c6f91abca6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:c5:d3:e2:ca:d9:60:e7:fa:0b:ee:d2:33:
76:87:c1:0d:ec:1e:5d:d3:15:24:a9:0f:51:60:9c:
60:5a:8b:b8:b1:27:1a:a6:f1:08:20:96:de:67:bd:
a9:18:66:9e:30:12:40:0b:a7:2b:66:90:af:a8:3d:
55:f2:69:43:0f:79:d0:56:99:1b:9c:48:2e:9b:04:
2f:69:4b:6e:2f:0f:b5:cb:fd:f2:36:37:09:76:b9:
f2:ad:b9:1e:68:25:b6:cf:84:6d:49:4a:9a:24:b0:
a0:1a:85:05:8c:58:8f:15:1f:d6:5d:5d:ac:98:b5:
24:98:40:bf:f8:80:66:8e:28:0b:b5:67:fb:31:45:
bf:31:be:13:82:9f:b8:c0:ea:05:34:b8:db:53:ac:
52:1f:50:f4:93:b6:67:c1:c5:80:b3:f6:69:b1:a7:
e2:f6:45:7f:81:ca:d9:6a:81:6f:be:8d:9e:c4:ca:
f9:4a:70:1e:55:21:74:60:23:82:87:1f:08:3e:78:
f2:22:5b:e9:7c:e3:56:2d:64:e7:26:b0:ce:5f:de:
43:13:55:8e:b3:00:31:94:a0:13:50:71:40:75:4a:
fe:5a:c7:b1:c4:55:df:b0:41:4e:a9:3d:79:a9:f5:
31:fe:96:e4:6f:8d:52:8c:7c:0d:ab:d3:e7:fa:7c:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:90:FC:61:3F:61:8C:A5:A8:7D:0B:E7:5C:6F:91:AB:CA:6D:33
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:ac:58:21:73:75:52:21:87:b0:7c:43:e6:fa:82:79:a1:1f:
78:49:f9:ca:1e:13:fd:91:e6:b1:b6:3b:00:3b:09:fa:74:3a:
a9:ff:d9:da:ba:b7:5b:b7:23:c6:36:6f:ca:b7:81:87:01:55:
ad:21:ee:e5:dd:6c:cd:cc:29:9a:9e:90:cc:ef:d0:da:9c:bf:
4d:16:8d:2c:64:f4:34:75:f7:6f:7d:78:b7:74:d9:d9:56:33:
ed:32:94:8f:ef:1f:48:b6:eb:d9:2e:5c:16:38:29:15:c9:9b:
25:99:af:c5:1f:c1:b6:75:77:51:67:fc:a0:c6:2e:6b:56:1d:
8f:03:64:4f:8d:20:ef:11:22:7a:46:a6:7f:e7:23:b2:3a:b8:
45:4c:8d:99:46:4d:aa:ed:2d:30:4a:aa:3e:00:c8:e1:30:6c:
ad:fd:e5:7e:93:c9:66:df:df:72:83:c5:e9:d4:14:b2:70:9a:
d8:d7:7d:dd:25:0c:53:c5:f6:c0:07:45:30:d6:f4:fb:ba:63:
f3:e0:f3:71:85:4d:6c:fe:3b:ae:e7:0a:e0:f1:75:49:f6:44:
84:4e:44:22:89:59:86:bf:7c:a5:23:3f:24:8b:80:57:48:24:
f1:f8:26:2a:40:2e:b8:da:4a:30:69:a1:25:b1:46:f9:26:f6:
e2:ce:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:12 2025 by rpki-client