Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier: b9faGYZl2X/48JkR5JeUE435ZcDPmHI9anAf6/ckx4w=
Subject key identifier: B7:4A:1B:51:CF:59:E3:23:32:1C:F0:46:4F:F7:28:04:60:6C:1F:6E
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial: 019654257AA8115CDB14D789D1F87505143D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number: 050F
Signing time: Sun 20 Apr 2025 17:01:04 +0000
Manifest this update: Sun 20 Apr 2025 17:01:04 +0000
Manifest next update: Mon 21 Apr 2025 17:01:04 +0000
Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: nw5a13ZHMmgIcBGJoJf5tN7DYpZWV4Ogg+rMdHZFMjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:7a:a8:11:5c:db:14:d7:89:d1:f8:75:05:14:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Validity
Not Before: Apr 20 17:01:04 2025 GMT
Not After : Apr 21 17:01:04 2025 GMT
Subject: CN=b74a1b51cf59e323321cf0464ff72804606c1f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:8c:70:f5:f2:25:57:6c:29:88:7b:3e:90:
bd:d6:7e:65:24:ae:67:cc:f4:5b:d9:b2:d7:f4:19:
96:9c:4f:63:75:b5:82:ac:7a:dd:00:10:d3:00:c1:
69:6d:94:f1:7c:b8:9f:ae:ae:ba:1c:3a:77:e9:a4:
b4:76:fe:9c:aa:e9:1e:6e:3a:09:e5:b1:da:01:de:
ce:81:9b:7f:12:3a:fe:13:5d:3f:f5:af:cd:41:c7:
ae:19:ac:af:7d:05:df:46:10:2e:ef:58:a7:9a:96:
59:02:14:d9:ec:71:14:24:4c:23:55:ef:e6:91:40:
09:c3:07:59:c1:3e:bf:6f:24:7e:df:b1:02:0a:40:
6c:92:3e:7d:38:f6:e9:59:8f:00:40:22:cd:e5:58:
35:d6:10:2b:47:38:6c:8d:ff:af:14:0b:68:e7:3c:
39:fd:b3:a1:3e:b9:5b:53:b8:8b:f0:d4:d1:78:07:
29:1d:d2:c5:80:2b:05:c6:e0:14:33:26:3e:f6:34:
ef:a3:3d:72:41:a4:b1:84:81:44:c2:8f:65:9e:85:
69:71:21:b7:2f:54:15:91:5f:ad:2d:1c:ad:c4:78:
ec:8b:ec:f6:c1:d0:9e:9d:8c:de:c7:76:42:e5:37:
35:77:34:1d:a7:29:c9:a4:64:47:9e:c9:09:f3:2f:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:1B:51:CF:59:E3:23:32:1C:F0:46:4F:F7:28:04:60:6C:1F:6E
X509v3 Authority Key Identifier:
keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:6c:7b:1a:b0:f3:23:2b:8f:b0:8a:2b:1c:6c:af:58:19:
6b:fd:e9:fa:b4:91:f2:5d:1a:c9:08:db:7c:bb:b8:fc:9e:93:
93:a5:97:85:cd:b8:d6:41:aa:e9:4c:f9:84:17:7b:4b:29:54:
f2:32:a6:7b:08:ad:6e:5c:21:98:e6:2e:4a:57:4b:96:5f:5d:
fe:43:ce:92:46:22:68:f1:c5:07:ae:d8:b5:c1:08:64:08:95:
b1:45:81:d0:56:dc:3f:f7:08:5c:ed:be:71:da:c6:bc:b9:93:
df:0f:02:50:44:c6:74:b2:fc:d4:4a:45:fe:44:01:db:c4:cb:
67:11:a2:05:db:5a:5f:23:dc:39:fa:09:04:e7:33:f1:64:00:
c3:55:c3:19:d4:f0:7e:6e:3b:64:1c:4c:66:de:d9:e1:d6:b8:
8c:e5:d1:6b:87:3d:3b:d0:0a:70:e0:fb:91:2a:a7:43:5a:d0:
c2:31:be:04:ca:02:58:0f:45:ab:27:c5:79:06:3a:19:39:28:
c2:79:52:32:0c:30:42:0c:30:fe:13:2d:f1:f3:81:cc:2d:53:
9c:c6:c3:2e:f0:75:02:f2:ed:5f:56:4e:dd:55:9c:1e:7f:44:
c6:29:e6:d7:c0:8c:d1:02:bb:9c:e0:55:86:b3:6d:6a:72:6c:
81:ed:95:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJXqoEVzbFNeJ0fh1BRQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTczOTdlNDUzMDYxODUxMDJiZmQ5ZWUwYTFmOTRkMWFj
MDEwMTIwHhcNMjUwNDIwMTcwMTA0WhcNMjUwNDIxMTcwMTA0WjAzMTEwLwYDVQQD
EyhiNzRhMWI1MWNmNTllMzIzMzIxY2YwNDY0ZmY3MjgwNDYwNmMxZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgGMcPXyJVdsKYh7PpC91n5lJK5n
zPRb2bLX9BmWnE9jdbWCrHrdABDTAMFpbZTxfLifrq66HDp36aS0dv6cqukebjoJ
5bHaAd7OgZt/Ejr+E10/9a/NQceuGayvfQXfRhAu71inmpZZAhTZ7HEUJEwjVe/m
kUAJwwdZwT6/byR+37ECCkBskj59OPbpWY8AQCLN5Vg11hArRzhsjf+vFAto5zw5
/bOhPrlbU7iL8NTReAcpHdLFgCsFxuAUMyY+9jTvoz1yQaSxhIFEwo9lnoVpcSG3
L1QVkV+tLRytxHjsi+z2wdCenYzex3ZC5Tc1dzQdpynJpGRHnskJ8y8hZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdKG1HPWeMjMhzwRk/3KARgbB9uMB8GA1UdIwQY
MBaAFFXnOX5FMGGFECv9nuCh+U0awBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgt
MzEwNTU0NjgyMjIzLzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgtMzEwNTU0NjgyMjIz
LzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc1sexqw
8yMrj7CKKxxsr1gZa/3p+rSR8l0ayQjbfLu4/J6Tk6WXhc241kGq6Uz5hBd7SylU
8jKmewitblwhmOYuSldLll9d/kPOkkYiaPHFB67YtcEIZAiVsUWB0FbcP/cIXO2+
cdrGvLmT3w8CUETGdLL81EpF/kQB28TLZxGiBdtaXyPcOfoJBOcz8WQAw1XDGdTw
fm47ZBxMZt7Z4da4jOXRa4c9O9AKcOD7kSqnQ1rQwjG+BMoCWA9FqyfFeQY6GTko
wnlSMgwwQgww/hMt8fOBzC1TnMbDLvB1AvLtX1ZO3VWcHn9Exinm18CM0QK7nOBV
hrNtanJsge2Vsg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:15 2025 by rpki-client