Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: L0CqtaJJEcpCMN37LtUO/+OWvFLIsPJSIL+LvHxyXyY=
Subject key identifier: 34:34:FF:A8:A4:14:FC:8A:E8:05:FB:22:F4:59:8E:D6:92:C5:34:D5
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 019655379FA99606C14AD6B021F40557D482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:00:30 +0000
Manifest this update: Sun 20 Apr 2025 22:00:30 +0000
Manifest next update: Mon 21 Apr 2025 22:00:30 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: A3RvFMwnz9NENR1It2R6N8PO1LH2bQTxpwVacfVogh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9f:a9:96:06:c1:4a:d6:b0:21:f4:05:57:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Apr 20 22:00:30 2025 GMT
Not After : Apr 21 22:00:30 2025 GMT
Subject: CN=3434ffa8a414fc8ae805fb22f4598ed692c534d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:43:56:da:5d:84:df:46:fd:0d:10:8f:01:
57:2d:03:6f:77:b4:ad:56:96:fb:7e:0d:9f:14:7a:
ba:e2:bb:ca:a0:6a:1a:07:ea:9a:98:da:72:a8:fd:
8f:27:46:a9:c9:52:59:d9:a2:4d:0e:27:bc:b7:03:
c0:2e:8a:ce:8a:0b:55:38:5b:b4:b4:af:29:e9:68:
70:ae:9c:ff:5c:1e:a4:f9:79:2e:ad:27:df:79:69:
63:85:35:fb:21:3c:1e:bb:49:db:ef:0a:aa:56:1f:
e4:28:48:64:08:90:48:d6:e7:24:c2:1b:4b:5f:49:
47:4a:53:5b:cd:a4:d1:a7:d3:1d:80:22:5e:b9:58:
8f:05:e1:01:51:08:b8:ba:92:8e:cd:08:2f:c9:03:
29:f3:61:4a:e3:68:4c:f4:6d:16:d3:16:8a:46:3c:
8e:f8:d0:00:94:05:b4:eb:f0:86:a5:3e:5d:5d:c0:
13:5f:a4:88:60:e3:50:d9:c5:30:83:17:57:c7:9d:
4b:99:48:be:8a:1b:e0:28:3d:53:03:44:c1:98:81:
db:ff:af:5b:fc:02:b8:92:64:cf:d2:b2:2e:ca:e2:
aa:9e:00:48:1a:0d:77:40:e5:3d:27:58:6b:24:25:
6f:b4:26:0d:13:8d:5c:26:6b:0d:dc:c9:d6:08:fb:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:FF:A8:A4:14:FC:8A:E8:05:FB:22:F4:59:8E:D6:92:C5:34:D5
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:29:1a:29:76:c8:90:d6:fc:c6:4d:ea:34:0e:bc:b4:78:06:
85:55:e2:06:9a:84:23:cb:78:f9:d3:da:3a:85:cb:08:c5:49:
4b:3a:49:85:cf:8d:29:c0:68:ce:7a:ff:5d:66:8f:6f:4f:78:
2b:6a:63:10:82:d1:9b:75:d7:ce:c6:24:2c:fe:74:24:53:34:
63:bd:f7:23:90:b2:2d:c2:e0:5c:4f:63:12:23:eb:71:28:e9:
00:5c:bd:0a:4d:dc:cb:06:c9:8b:7d:dc:af:46:8e:65:d7:7d:
fa:6c:e3:14:2f:7b:eb:5d:d4:fa:f1:6f:e9:24:ad:49:34:34:
9e:13:02:de:01:88:7e:ca:e6:27:5e:02:c2:d8:74:e0:6f:2d:
16:08:d5:c7:98:ec:90:8d:ac:eb:17:cb:e0:cb:88:9f:62:c0:
0d:ed:cc:77:4e:51:c5:31:94:d1:f6:d7:0e:66:0d:8f:67:f4:
aa:7e:a3:28:8c:b8:bf:3c:eb:75:f8:9e:b5:3f:08:d9:0f:69:
44:7f:24:58:86:37:20:e9:7b:37:31:60:22:2b:81:c7:a3:3d:
d3:27:58:ce:20:ca:b4:2b:2f:8f:71:87:1e:09:71:44:58:16:
c7:65:87:92:71:44:83:2e:bd:64:32:33:bc:04:53:e5:17:95:
fa:46:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:19 2025 by rpki-client