Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: Q97oLkYrErw54ALYRw8Pl/IsLhwLejlNNuiV+NjV3Vs=
Subject key identifier: 00:E8:04:2D:F1:15:61:F5:7C:39:29:C6:24:AD:F0:29:67:7C:5D:91
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 01965B396814DCA25458397A1D765FDD5472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 21
Signing time: Tue 22 Apr 2025 02:00:10 +0000
Manifest this update: Tue 22 Apr 2025 02:00:10 +0000
Manifest next update: Wed 23 Apr 2025 02:00:10 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: 31LVnfCskV05rSqS9mn/gQNQ2fegijIJJxOWDmL1pvk=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:68:14:dc:a2:54:58:39:7a:1d:76:5f:dd:54:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Apr 22 02:00:10 2025 GMT
Not After : Apr 23 02:00:10 2025 GMT
Subject: CN=00e8042df11561f57c3929c624adf029677c5d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:bf:7d:fe:15:b9:b2:16:31:45:e6:a5:42:
61:41:73:2d:c3:32:63:8f:52:b5:49:92:99:43:4a:
58:9e:18:77:ff:97:d8:82:63:80:af:36:b9:5f:b5:
01:76:f0:b9:aa:11:55:03:ea:56:98:9d:3e:d4:b4:
af:dd:d2:fa:e6:cf:2a:d6:ba:30:8a:d1:81:3e:42:
1c:eb:ca:65:66:58:3a:3a:69:1a:48:19:22:d4:86:
e9:3a:a9:15:14:61:2f:e5:1d:de:e1:a6:55:41:e4:
f6:66:0d:1d:54:cf:56:15:8a:c1:58:fe:9b:21:2b:
c7:41:28:39:fd:f1:6e:a1:47:d4:02:15:f1:27:82:
4e:5d:ad:04:4c:4a:b2:7d:59:c2:72:04:df:61:37:
c3:27:8b:1c:eb:89:58:8c:55:bf:0d:23:37:22:41:
44:5b:24:01:7e:f3:24:5d:84:de:84:8a:b8:bb:9c:
91:e4:10:04:93:16:df:16:11:5a:58:70:e3:14:21:
68:33:49:4d:78:cf:02:a5:7e:b0:00:7c:ae:68:43:
0b:75:71:ec:36:0a:47:d6:4e:94:47:ca:9b:63:22:
42:09:95:43:96:a3:e9:14:a8:11:87:7f:db:34:dd:
0b:73:eb:54:0f:d3:70:60:69:ad:c2:a5:53:dc:14:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:04:2D:F1:15:61:F5:7C:39:29:C6:24:AD:F0:29:67:7C:5D:91
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:1e:48:c6:51:47:d2:ec:ca:bc:bf:66:43:c1:62:97:c2:
04:3e:bb:0f:26:a0:a5:9c:a0:18:43:06:7d:d0:51:99:f6:2d:
7d:26:6c:d0:6d:11:b5:b7:c1:51:b2:38:9b:45:2b:1c:f5:20:
6f:c2:d4:94:85:6f:c2:7b:64:10:cc:0e:01:c0:72:78:ca:b8:
d6:76:4d:a7:ec:0a:08:d5:5f:0d:17:73:4f:45:17:d4:91:71:
79:cc:ab:85:92:88:4b:e3:c6:b0:99:37:c4:b7:b6:17:31:64:
fd:67:17:58:ed:75:4c:2b:c2:ba:64:90:1e:f7:a7:11:28:b5:
67:69:3b:be:6a:4e:f2:76:47:ee:22:8e:25:87:ee:a4:18:69:
d2:94:f5:8b:6b:29:90:f3:07:34:36:9f:17:7a:ad:62:d9:01:
8a:36:9e:2a:5a:47:eb:ac:af:80:b3:8d:09:8a:32:a0:b8:55:
3c:fe:e6:12:2e:61:63:fb:d3:18:16:5c:3a:0a:33:ab:85:1f:
67:a5:22:da:af:61:0f:86:54:5a:d9:15:ef:cf:1e:e1:4d:18:
3a:1f:71:36:d8:50:eb:30:a2:24:5c:d7:94:80:5e:51:10:13:
79:0e:52:70:47:be:71:0e:31:ea:90:ea:6a:f3:f3:60:7f:cf:
4a:19:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:48 2025 by rpki-client