Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: JMoYTV1N66BoI2MoZLA83YkLofb81fSHznpTlWDF6cs=
Subject key identifier: A4:93:AC:23:5B:D6:00:76:11:C1:AF:E9:08:4C:4A:BC:FB:EA:4C:65
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 0196553775C6568CA898209AD1DEBCCB46FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 1026
Signing time: Sun 20 Apr 2025 22:00:20 +0000
Manifest this update: Sun 20 Apr 2025 22:00:20 +0000
Manifest next update: Mon 21 Apr 2025 22:00:20 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: bbHHBQs6YARtLpMOONr9NChTVOSTTGh/kENXeXjuChk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:75:c6:56:8c:a8:98:20:9a:d1:de:bc:cb:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Apr 20 22:00:20 2025 GMT
Not After : Apr 21 22:00:20 2025 GMT
Subject: CN=a493ac235bd6007611c1afe9084c4abcfbea4c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:71:4b:fb:fb:9c:4a:6e:9d:d0:f9:55:c2:
e4:49:b5:64:d2:f9:df:a8:3d:07:03:9a:b4:05:34:
f1:b4:21:5d:27:3c:e5:05:e1:35:30:f9:fb:3e:7f:
80:6f:60:e7:8d:c3:2c:f3:ba:07:8e:5d:ac:72:6c:
47:15:97:1e:96:36:b3:82:8a:46:c2:e7:e7:9e:43:
26:65:89:f3:bd:50:58:d8:a7:da:54:a5:b3:3e:71:
6d:a6:ab:ca:21:c9:ac:fb:4e:52:ae:b1:02:c5:f3:
9b:15:8e:58:8a:91:2a:44:fd:dc:f3:cc:50:b8:e3:
58:47:50:02:9a:04:89:98:81:d5:2a:7d:51:a4:99:
c5:d1:43:3d:da:b1:24:9c:cd:0a:8e:51:fb:a6:5f:
09:68:ae:e8:5f:62:56:f6:73:72:9f:18:f0:e4:3d:
b3:e8:bb:9d:1b:82:16:d1:ab:7a:ea:cf:22:d8:c4:
60:79:b7:1a:15:1c:08:34:79:3b:55:da:b0:b7:77:
5f:32:72:0f:c8:6d:a7:c3:cb:3b:0e:18:eb:b1:11:
0a:14:8f:81:3e:90:3a:37:9f:fd:2b:71:9f:b0:6a:
3b:06:68:98:af:63:d5:6f:7f:10:f2:68:39:b4:c7:
f4:8e:07:6c:8c:7d:87:f8:31:fe:f7:fa:33:c5:0f:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:AC:23:5B:D6:00:76:11:C1:AF:E9:08:4C:4A:BC:FB:EA:4C:65
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:c1:32:00:17:9e:ae:63:6a:9c:49:e9:92:48:30:83:59:
5b:6c:92:36:66:f7:d6:06:26:40:0d:0f:c0:aa:65:a9:5f:ad:
76:d6:67:3a:9c:3a:43:6a:ab:82:04:a2:43:ae:8d:8a:fb:e8:
80:3e:97:5f:e8:ce:66:46:51:10:91:b1:76:41:e0:ea:e8:56:
52:c1:c0:57:35:6d:cf:93:ec:c2:10:b4:65:9b:f4:8a:e1:e8:
29:43:49:95:d5:aa:0f:e4:a7:c6:3a:80:16:c8:7e:44:34:0b:
6c:5d:c7:63:04:d1:9c:3e:12:88:bb:5f:31:ce:bd:8d:6b:0c:
a4:b1:45:58:f0:7e:cb:d0:81:4e:2c:e6:df:96:b8:00:a0:5b:
0c:7f:09:b9:04:9e:49:71:1f:73:c4:22:c0:13:fa:dd:d8:ac:
b5:c5:1e:9c:d7:a0:d2:66:83:8a:fb:db:ca:35:35:ff:8c:1d:
a5:7f:54:3d:15:89:d4:9a:3c:8a:65:0d:31:e0:98:12:61:38:
6e:a3:a1:84:60:f9:c2:53:42:1c:10:9b:0e:86:eb:3d:ce:52:
b8:d7:49:a9:41:90:1e:df:92:47:60:45:c2:c5:fd:0f:23:f3:
ad:26:37:b9:c7:43:f2:c2:53:4e:f6:07:47:01:a4:a1:ab:8d:
70:c9:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:40 2025 by rpki-client