Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: 4N4gh+Rwe5cbcqPDxkSSSZ7bGNmVrVQGL5YLCmwsuKg=
Subject key identifier: 43:9C:6B:89:FC:04:78:47:24:4B:10:2A:41:4F:8C:33:3B:7C:CE:A1
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 01965236596E90B5234706C37CC69068A264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 12FD
Signing time: Sun 20 Apr 2025 08:00:15 +0000
Manifest this update: Sun 20 Apr 2025 08:00:15 +0000
Manifest next update: Mon 21 Apr 2025 08:00:15 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: 7uxThKfO5EANNWyPyU+oRlsFZuLXyUlwXd8DmjU+ZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:59:6e:90:b5:23:47:06:c3:7c:c6:90:68:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Apr 20 08:00:15 2025 GMT
Not After : Apr 21 08:00:15 2025 GMT
Subject: CN=439c6b89fc047847244b102a414f8c333b7ccea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:c5:2c:53:ad:e9:fe:1c:28:65:26:54:f2:
a1:6d:47:4b:d2:fc:69:f5:3b:b6:06:32:8f:e7:3f:
65:fe:5d:67:68:35:0a:71:9d:3f:18:35:71:66:ec:
30:ac:be:ad:bd:66:e2:39:41:13:0c:66:ea:4a:c7:
33:12:e4:27:75:92:bd:80:1b:8d:df:3b:98:2b:f6:
49:30:ec:07:50:fb:32:16:dc:2a:ea:94:33:36:30:
2e:37:8d:62:c1:eb:9a:7d:49:60:bb:fa:de:32:df:
4f:8f:fc:ef:90:b0:0b:3a:55:05:09:21:8e:a6:7b:
83:83:3f:6d:a6:b0:97:58:10:a6:fe:9a:49:b3:65:
c5:06:ce:f3:8e:18:6b:5d:b4:6c:bc:72:27:72:c8:
a3:d9:9c:f4:54:db:6a:0d:fa:2a:fe:0e:c3:c6:54:
3f:38:f0:2b:f5:eb:6e:74:0f:0e:fe:84:6f:c2:e1:
e6:1e:c6:91:cc:39:61:bd:b7:e1:75:9a:ee:c3:33:
c7:b8:a0:59:f4:4d:d7:a0:d7:40:af:59:4b:16:e3:
24:86:05:ed:42:0b:bf:4e:59:25:74:87:dc:99:ae:
de:a0:07:75:df:0b:73:89:a1:ab:55:46:40:53:c0:
89:e6:48:6b:6f:88:9a:73:cc:08:d6:a7:bb:73:27:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:6B:89:FC:04:78:47:24:4B:10:2A:41:4F:8C:33:3B:7C:CE:A1
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:bf:4c:5f:01:e9:79:e0:6c:af:f8:21:80:af:a9:07:64:
be:f6:0a:84:49:b0:91:05:d5:4c:04:4b:5c:bc:50:5e:88:1e:
df:88:ee:30:4f:db:d4:d0:a7:ab:a7:19:6c:eb:a3:ec:f1:b5:
ae:7f:66:84:68:6b:9b:df:42:24:bc:e6:07:51:4b:4f:09:df:
64:96:92:94:a9:4c:0c:8a:c1:29:85:f1:be:96:64:81:d3:de:
4a:57:02:53:b6:fc:6d:6d:ce:a9:3c:61:86:b9:c9:b4:be:a2:
9c:4f:e4:9a:f7:98:d2:9b:2e:cf:0e:6e:40:5e:db:9c:70:2e:
e1:c1:52:b9:d5:03:44:14:8f:13:14:95:96:6e:0e:43:79:0c:
ee:17:dc:f4:fe:06:65:ab:a6:a8:6b:a6:f2:90:f8:1b:a9:6d:
87:e5:92:d0:0c:17:fd:9c:dc:8b:a5:e6:4a:9a:f5:74:31:72:
6d:08:ee:8e:ef:23:4e:94:e5:07:48:3a:21:0d:c3:c7:fe:47:
ed:cf:6a:78:2b:9f:73:82:55:08:aa:84:ef:4c:49:19:c6:ab:
ed:7c:bc:2d:1e:81:69:ae:5d:27:1d:0f:b4:a9:87:fb:cb:9d:
9f:29:9f:6f:cf:3e:1c:3a:ec:13:65:e2:c7:a7:ca:fb:5e:70:
2f:20:73:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNllukLUjRwbDfMaQaKJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUwNDIwMDgwMDE1WhcNMjUwNDIxMDgwMDE1WjAzMTEwLwYDVQQD
Eyg0MzljNmI4OWZjMDQ3ODQ3MjQ0YjEwMmE0MTRmOGMzMzNiN2NjZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OXFLFOt6f4cKGUmVPKhbUdL0vxp
9Tu2BjKP5z9l/l1naDUKcZ0/GDVxZuwwrL6tvWbiOUETDGbqSsczEuQndZK9gBuN
3zuYK/ZJMOwHUPsyFtwq6pQzNjAuN41iweuafUlgu/reMt9Pj/zvkLALOlUFCSGO
pnuDgz9tprCXWBCm/ppJs2XFBs7zjhhrXbRsvHIncsij2Zz0VNtqDfoq/g7DxlQ/
OPAr9etudA8O/oRvwuHmHsaRzDlhvbfhdZruwzPHuKBZ9E3XoNdAr1lLFuMkhgXt
Qgu/TlkldIfcma7eoAd13wtziaGrVUZAU8CJ5khrb4iac8wI1qe7cycSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOca4n8BHhHJEsQKkFPjDM7fM6hMB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjge/TF8B
6XngbK/4IYCvqQdkvvYKhEmwkQXVTARLXLxQXoge34juME/b1NCnq6cZbOuj7PG1
rn9mhGhrm99CJLzmB1FLTwnfZJaSlKlMDIrBKYXxvpZkgdPeSlcCU7b8bW3OqTxh
hrnJtL6inE/kmveY0psuzw5uQF7bnHAu4cFSudUDRBSPExSVlm4OQ3kM7hfc9P4G
ZaumqGum8pD4G6lth+WS0AwX/Zzci6XmSpr1dDFybQjuju8jTpTlB0g6IQ3Dx/5H
7c9qeCufc4JVCKqE70xJGcar7Xy8LR6Baa5dJx0PtKmH+8udnymfb88+HDrsE2Xi
x6fK+15wLyBzxQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:16:10 2025 by rpki-client