Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: 2Jy4pic/ss8iLZR+FPyHT4Y9BMytxhmQ5WL4h23Dj10=
Subject key identifier: E6:BC:B5:A8:E3:9E:FC:7B:81:D0:9C:2E:F5:7C:46:7F:E0:87:EB:17
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 01965CF24686718A332CC847DC2F6DCCAA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 109C
Signing time: Tue 22 Apr 2025 10:01:43 +0000
Manifest this update: Tue 22 Apr 2025 10:01:43 +0000
Manifest next update: Wed 23 Apr 2025 10:01:43 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: eUotMiUh9qKF+g7tHTCCl1NoBl1fPV0xoQyqA6IiZFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:46:86:71:8a:33:2c:c8:47:dc:2f:6d:cc:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Apr 22 10:01:43 2025 GMT
Not After : Apr 23 10:01:43 2025 GMT
Subject: CN=e6bcb5a8e39efc7b81d09c2ef57c467fe087eb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:18:0e:8c:ea:b8:20:f4:35:4e:a2:bb:ab:
29:3f:ae:75:af:00:ae:76:d1:48:81:28:ff:85:4d:
8b:ba:e0:3f:e4:81:8a:f3:78:a4:f5:3f:78:fb:91:
0e:6c:d8:79:b9:a5:45:54:e4:65:35:10:8b:da:e0:
27:b3:54:2b:dc:a9:72:77:63:4a:a9:0c:e7:f1:ea:
56:5f:83:20:0f:fe:9c:b9:20:d0:60:35:dd:9d:34:
73:04:16:6e:10:43:d8:eb:ce:39:45:dc:56:70:3a:
50:cd:a9:60:48:11:05:c3:cd:5d:0c:b4:fa:e5:f9:
95:5c:be:2f:bb:11:11:23:31:15:d6:c4:dd:31:05:
b4:79:c3:eb:cc:71:8e:90:07:95:74:68:f7:c4:b3:
12:c8:a7:29:70:4f:2b:73:85:c6:ab:12:6b:a4:fd:
89:95:87:b4:e2:4a:0e:de:06:85:19:8f:1c:90:a8:
aa:a1:46:ef:9e:34:80:88:03:32:65:8d:10:8e:a9:
3c:5f:05:36:34:2b:a3:39:f3:11:cd:20:d2:e1:0b:
3b:f8:6f:12:b4:f6:33:f8:ef:55:a7:01:08:ef:b7:
00:36:0e:9e:c9:90:06:63:2e:7b:54:29:c8:6e:2d:
7a:34:04:a0:12:08:99:1b:37:70:41:2c:9e:6d:a8:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BC:B5:A8:E3:9E:FC:7B:81:D0:9C:2E:F5:7C:46:7F:E0:87:EB:17
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bf:80:bd:e6:68:98:ad:30:02:02:05:bd:67:8f:82:67:a4:
b3:30:41:7e:f8:97:78:cb:4b:d2:da:55:d2:2e:af:e6:c8:a7:
b2:32:55:51:9e:f2:0f:b2:a9:d3:27:05:d3:e9:79:59:c8:c5:
32:0f:e3:02:39:33:ac:b5:99:5e:12:c5:91:44:28:9b:63:02:
87:9d:84:56:8e:fd:4e:f8:ea:c3:9f:82:a5:3a:d2:45:59:71:
7b:b9:b5:b8:41:04:96:0c:5b:75:f4:aa:37:0d:12:8c:ac:6d:
a3:31:5e:e3:78:96:df:f6:2e:6d:12:bd:d8:1a:cd:5d:9b:80:
ee:5b:b6:18:23:e4:2f:5b:04:d4:e4:51:72:86:0f:1c:47:9c:
59:ae:bf:30:e8:d1:e1:cd:5b:7f:f9:80:2f:d6:67:2c:4e:3b:
0c:72:26:70:93:8b:36:15:97:de:c0:65:a1:bc:9d:b6:0b:15:
33:d1:54:37:d0:4f:2f:1f:6f:a7:e6:a4:9b:b9:03:52:0a:5b:
fc:33:9d:61:21:35:38:6a:39:75:48:1a:89:ef:77:b6:bb:fe:
4e:37:8c:2a:b9:b0:c7:a8:81:e9:ec:d5:1c:67:c6:8e:19:41:
dd:77:52:87:77:e2:d4:a7:1c:e5:6d:86:e0:01:6b:a1:3b:fc:
b9:4e:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:00:52 2025 by rpki-client