
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier: VPcRCN6c+UBkk8E8racgZ4WDrAXLPBR+YiYqb1p25B4=
Subject key identifier: DC:9C:7D:63:9F:14:1C:73:62:8E:B5:A7:25:D4:EA:0C:B4:6C:20:DF
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 019655A61018581BF3D6E5D47D2A37C667E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number: 09DD
Signing time: Mon 21 Apr 2025 00:01:08 +0000
Manifest this update: Mon 21 Apr 2025 00:01:08 +0000
Manifest next update: Tue 22 Apr 2025 00:01:08 +0000
Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: bXeU4yIQMPaVWHdY4jNciFj0wVNPCBcRn2mQ4c2oEKI=)
2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:10:18:58:1b:f3:d6:e5:d4:7d:2a:37:c6:67:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Apr 21 00:01:08 2025 GMT
Not After : Apr 22 00:01:08 2025 GMT
Subject: CN=dc9c7d639f141c73628eb5a725d4ea0cb46c20df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:5c:b9:c0:86:5f:2c:19:5f:48:0f:e0:e2:
25:27:37:29:3e:cc:96:0c:06:11:e0:75:65:0c:77:
63:18:c1:21:54:4c:44:93:6c:be:80:96:6b:79:03:
3d:d0:ff:17:15:03:3a:81:44:ed:e2:86:08:05:87:
f5:64:f4:01:c7:7a:e0:95:d2:09:66:90:2a:95:01:
6a:5b:e8:f6:8f:01:1e:9e:a0:0e:f2:0a:37:23:d7:
a5:70:1b:60:8c:df:a0:77:8c:bd:28:98:71:54:c2:
72:85:74:d4:30:2b:6e:1a:1c:b3:e8:20:49:be:57:
92:11:c4:e3:f8:71:98:4f:e2:b7:45:a8:27:89:82:
ca:b7:29:d9:a3:dc:d7:4a:08:9e:a3:98:09:72:3f:
31:48:28:20:ed:20:16:88:86:3a:2a:bf:68:0e:cb:
9c:af:f5:d4:94:27:df:9d:42:76:5a:58:da:4e:1f:
a2:5d:97:f1:d7:27:00:4f:44:8b:2e:a5:1b:78:37:
4e:01:d0:b2:dc:0d:12:ad:40:4d:10:63:72:b8:99:
cd:2c:b3:32:48:7d:78:74:88:f4:4a:1c:1b:6e:43:
df:de:38:d9:9d:ce:08:df:7e:dd:74:a4:5a:da:3e:
c2:78:4a:93:01:3d:24:f8:17:28:59:83:71:73:17:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:7D:63:9F:14:1C:73:62:8E:B5:A7:25:D4:EA:0C:B4:6C:20:DF
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9b:21:86:bf:3a:6e:71:f3:4e:41:66:91:4f:a6:b4:f7:18:
b8:73:48:2c:ad:8b:1f:12:b2:33:89:94:d4:f6:96:3f:43:03:
41:d5:01:22:78:34:3d:3d:5c:f0:1c:1d:a7:0b:16:2e:b2:43:
0c:e0:39:53:f0:82:09:2f:23:ba:0a:39:08:dc:10:bc:ec:bb:
b7:2f:9d:f5:f3:c8:83:88:73:3f:cd:1c:8f:28:79:e0:85:ea:
aa:1a:38:06:59:6c:7c:a9:d4:4f:6c:61:cb:2f:e0:a0:76:67:
bd:7f:55:bd:e3:ef:29:83:68:b2:de:24:89:60:a6:b3:a6:b5:
37:17:91:93:d8:06:65:57:8d:58:15:4d:c3:84:bd:9b:b1:1e:
66:2c:ca:56:50:65:37:f5:3f:3f:f3:30:6d:67:9e:70:67:71:
c5:00:00:97:4a:21:a9:3d:f7:4d:8e:fc:b8:c6:a7:f3:a4:f1:
2d:7d:60:28:33:99:78:c7:f0:24:6a:b7:4e:2d:89:47:7f:91:
dc:b9:40:01:51:ab:46:65:77:d8:27:6e:d1:74:bd:bb:70:3b:
f2:7f:5e:fb:24:e8:cf:aa:a5:dd:bc:ba:86:ca:79:d3:3e:b3:
4e:43:95:2e:85:2b:3c:0d:d6:d8:0d:ce:eb:8a:37:fc:13:b3:
c8:86:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:35:23 2025 by rpki-client