
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: 5ZyFOezEPtXrFrI0c7BaPpLcedmJDT8tKKftNjPaG5s=
Subject key identifier: 34:C4:94:C9:06:01:33:93:C1:3F:AE:7E:19:DA:9B:9F:A7:03:CA:17
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 01958B166B9EEF08F08B22968917F153C946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 11A2
Signing time: Wed 12 Mar 2025 16:00:57 +0000
Manifest this update: Wed 12 Mar 2025 16:00:57 +0000
Manifest next update: Thu 13 Mar 2025 16:00:57 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: +IvakaxBx4Tb8sTejW0MCK/vO3xDpWJaknz2naSnMVU=)
2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:6b:9e:ef:08:f0:8b:22:96:89:17:f1:53:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Mar 12 16:00:57 2025 GMT
Not After : Mar 13 16:00:57 2025 GMT
Subject: CN=34c494c906013393c13fae7e19da9b9fa703ca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:c4:28:32:f1:d4:40:a2:04:2b:47:02:7c:
20:01:c2:d8:ef:52:2f:ec:4f:eb:8e:cc:da:c6:9c:
a4:c5:70:92:c8:c7:59:12:1f:ff:4e:ee:cf:f2:35:
cb:c3:77:03:2f:c5:c5:54:33:38:8f:97:ee:06:a3:
02:19:3b:6a:35:7c:0b:f5:cf:ea:77:12:4e:18:bd:
05:2a:76:c1:b2:63:cf:8b:29:53:2c:79:e5:d8:8d:
71:3a:02:9a:7d:86:53:8c:53:ba:85:69:58:c9:07:
cf:ac:c1:02:8c:8d:f3:91:e4:f5:da:22:e9:a7:32:
a3:15:7b:0a:f3:7b:cc:a7:19:46:9c:02:50:5f:d2:
4a:73:94:a0:e9:59:58:09:4e:9a:57:8a:53:d3:24:
f5:85:79:1a:4e:9b:35:18:df:4e:4e:5d:72:40:76:
c3:87:b5:4c:ad:47:d8:08:4d:40:3c:34:09:8d:ff:
95:60:0d:79:22:42:46:45:7e:2b:59:1f:78:5a:03:
a0:63:77:07:40:27:6a:74:a2:ea:23:ba:85:8c:9a:
9b:4b:75:63:5c:7f:bc:a2:2d:0a:17:d6:10:f9:73:
56:15:8c:e5:ea:5f:ed:5f:28:fa:46:7c:cb:89:ac:
db:8c:ed:1e:fe:9d:2f:00:38:4f:64:73:2d:a3:1a:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:94:C9:06:01:33:93:C1:3F:AE:7E:19:DA:9B:9F:A7:03:CA:17
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:20:18:49:0c:23:6e:c7:91:97:17:8b:89:1f:30:8f:4e:
90:4d:cc:e5:08:90:37:a8:1e:26:84:de:91:5c:e0:13:50:49:
84:9e:7a:25:71:5f:91:80:f7:27:75:34:f6:3e:44:e9:c1:11:
9d:05:50:52:51:91:85:59:ef:8e:81:7b:a5:ba:c6:a0:a6:43:
e1:bf:42:16:a1:63:f2:3b:c2:dd:94:f6:56:ba:d7:91:2d:87:
1a:7a:09:16:bd:56:b3:bc:d5:37:e4:d4:99:53:e4:3a:c4:95:
25:62:21:1a:d2:65:b4:dd:73:b0:a1:a0:84:ab:2d:3b:8c:81:
7a:84:4d:98:c5:69:e3:be:19:62:74:78:33:c8:55:f6:0d:02:
47:5b:33:57:5b:e6:f0:ad:d0:98:6f:3c:67:86:76:70:08:6f:
28:97:1b:d6:66:a3:72:e5:46:d8:47:24:81:98:9d:5f:11:7e:
ff:23:04:41:96:4e:b6:55:96:52:ee:33:69:71:59:bb:93:68:
a6:e2:19:1e:a3:2b:94:e4:5e:05:15:55:15:34:6c:12:05:18:
0f:7c:50:77:0e:66:66:69:91:e1:a3:8d:f0:f4:a3:cd:b6:e4:
f0:0a:de:ae:e2:5b:3e:13:8c:b8:31:d2:1c:57:a5:ef:5c:f7:
41:b7:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:17 2025 by rpki-client