Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: JAvQlpEnmZhFBHSqqK8O9kV06w859++MbTTvdqNyAXo=
Subject key identifier: 8F:63:88:B5:1B:6E:0E:D4:02:63:90:C1:F3:F7:D3:A6:59:E7:69:19
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 0196561375BE722EDA04C50054C516AD3DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 02:00:37 +0000
Manifest this update: Mon 21 Apr 2025 02:00:37 +0000
Manifest next update: Tue 22 Apr 2025 02:00:37 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: SXLwyl3VYt0SF77q6waCl5QR/hIm1gYfSegt90xZcN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:75:be:72:2e:da:04:c5:00:54:c5:16:ad:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Apr 21 02:00:37 2025 GMT
Not After : Apr 22 02:00:37 2025 GMT
Subject: CN=8f6388b51b6e0ed4026390c1f3f7d3a659e76919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:c0:88:05:3b:d5:48:28:d5:b5:eb:ee:73:
4b:33:c2:05:9d:e7:3c:e9:46:c6:ff:27:54:81:ff:
fb:f8:bf:6e:7e:2b:f6:b8:4a:10:1b:56:76:a3:b4:
f4:56:5e:41:2d:f7:20:76:84:b8:10:82:61:eb:32:
6c:f7:91:b2:95:78:5f:45:0b:62:d7:69:73:15:95:
7e:e3:c9:fc:88:7b:4c:02:f8:7f:ce:16:2b:03:f5:
9e:c6:45:d1:11:2d:82:16:ef:23:33:6f:60:07:e0:
0a:36:d9:1d:8e:7a:ee:2e:10:e9:48:0e:76:fe:81:
08:bb:d1:34:87:c6:36:b0:d5:ae:7e:b2:6f:ce:65:
61:9c:94:fa:b2:13:a9:fa:91:74:4a:04:d1:06:f8:
88:51:f0:32:a7:b6:cb:40:69:65:e6:66:f9:f3:48:
9c:4a:a6:16:df:9d:5b:ae:e5:63:e8:8b:7f:30:c2:
98:6b:b7:e4:8a:10:3e:b6:55:88:61:a7:a7:ac:9d:
c6:9b:1a:bb:8a:20:d2:e1:35:4b:27:39:94:7c:1b:
76:2d:70:2c:8c:06:c0:e1:0d:37:05:28:67:93:fb:
64:a7:f8:cc:a8:88:ba:39:98:8d:da:1f:dc:ad:ec:
7a:9e:dc:14:bd:5c:16:bb:6a:26:e8:35:92:39:a6:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:88:B5:1B:6E:0E:D4:02:63:90:C1:F3:F7:D3:A6:59:E7:69:19
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0a:e1:20:56:a1:23:d8:91:73:63:e7:4b:27:a7:67:d6:15:
48:81:db:6c:66:b7:cb:dc:de:0e:d1:ba:ab:8a:f1:14:13:03:
bd:17:3f:77:4b:d7:b9:9b:d5:50:2f:79:72:e1:e4:a7:84:e1:
40:9a:8a:57:fb:1f:8e:3e:55:db:cb:f1:c5:06:9c:b7:67:d7:
23:f8:ad:7b:7a:77:79:4a:13:b1:7f:19:73:30:15:4e:5c:1e:
e4:79:9d:c6:06:b5:1d:03:d4:51:cc:5a:15:07:0c:71:69:14:
35:67:0d:d5:9d:13:a4:1e:a8:2c:4c:3c:9f:1c:9f:e2:4e:87:
5c:fd:33:2c:2f:76:1c:3f:85:65:6d:ca:7b:3b:94:e8:24:bf:
ab:f1:03:0d:e5:3e:8c:26:31:a1:86:67:33:8f:b9:56:f3:5b:
86:a1:c1:51:17:7e:2a:6c:d0:8b:95:b7:41:ae:ef:2b:20:b2:
12:1f:d6:86:a4:89:15:bd:5d:b6:01:71:84:7e:0b:b4:a5:31:
21:02:2e:55:be:ec:7e:00:36:09:7c:75:35:3a:45:5f:7f:78:
d0:b4:75:0c:47:fb:74:b9:7c:5e:ad:a9:02:9f:18:72:75:2c:
00:b7:f3:83:fb:be:b6:3c:89:47:20:05:75:08:70:dc:8c:71:
68:2c:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:16 2025 by rpki-client