Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: jf6LhIu5XNUy3KHwGaGAQ5e9FJf9cHFNHWm/TxgkWfA=
Subject key identifier: C9:47:49:FA:50:37:72:D1:67:3D:02:3A:04:80:6C:9D:F9:64:61:33
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 01964F6D44036EFF669CF4D5020545641319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 095B
Signing time: Sat 19 Apr 2025 19:01:22 +0000
Manifest this update: Sat 19 Apr 2025 19:01:22 +0000
Manifest next update: Sun 20 Apr 2025 19:01:22 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: NWwd8briWHKbCvg4ICZifOh3c365ClXWoRUh5JsGDo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:44:03:6e:ff:66:9c:f4:d5:02:05:45:64:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Apr 19 19:01:22 2025 GMT
Not After : Apr 20 19:01:22 2025 GMT
Subject: CN=c94749fa503772d1673d023a04806c9df9646133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:79:a8:4d:32:b3:b1:4c:98:c8:21:70:8a:
0d:4f:a4:ad:d3:ea:41:62:81:9e:86:ee:82:95:da:
d3:41:d5:d8:e8:e6:91:a3:57:1b:76:34:4c:88:bc:
fb:ea:c1:af:9c:07:76:31:8c:fa:d5:e2:29:a0:b0:
cb:a7:6c:55:51:5b:03:f7:95:10:a6:eb:a6:56:ee:
eb:52:ce:48:71:d5:3f:a1:29:57:e4:89:bb:53:ea:
f9:b3:14:57:e1:c4:41:a8:54:d8:9d:c7:8b:7f:24:
ac:6d:78:8e:5f:cd:3f:81:cb:66:5c:33:23:30:cf:
20:69:ed:a4:b6:49:bd:3c:e2:03:ab:3e:88:4c:f4:
a7:3b:63:38:71:87:53:88:e9:42:68:c2:3f:fa:db:
8c:81:19:34:27:2d:97:30:a1:98:0c:dc:59:b3:d8:
de:39:ec:7c:09:53:d3:0d:cc:ad:25:78:4c:72:93:
06:56:de:1d:a6:a5:1e:f7:96:32:26:c7:fe:cc:5f:
27:ce:2f:cd:19:f1:8f:b3:5c:fe:8c:e3:e9:8a:59:
99:4f:e7:60:5d:bf:4d:6f:f6:66:6d:3d:55:ab:e1:
e2:93:34:d0:96:18:7e:b1:f0:bc:33:8e:37:2b:ba:
e6:65:bc:fe:3c:ba:50:71:7f:f9:f4:47:c7:9e:d6:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:49:FA:50:37:72:D1:67:3D:02:3A:04:80:6C:9D:F9:64:61:33
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:08:52:82:1e:f1:a1:cf:ca:91:4c:af:f0:b4:98:e9:9b:
7a:c8:d7:b1:84:c3:19:d2:09:fb:66:5a:b8:69:8d:0b:78:b0:
03:d4:5b:d2:2d:61:b9:a6:f4:bd:fe:3e:c0:2f:f0:14:a9:ad:
38:80:fa:ec:16:1e:a8:57:4e:df:ec:9c:65:0e:c9:01:3c:1a:
5b:26:f8:35:1d:77:42:8d:f5:5c:77:4e:cd:f2:38:8c:c5:da:
77:a4:7d:fc:83:63:55:52:1f:7b:49:30:92:56:f6:8c:48:84:
56:53:f3:1c:ab:95:25:f6:2a:4b:c2:ce:e3:a5:87:13:76:44:
c5:e1:f0:68:fd:ab:8b:74:bc:5a:1b:a1:61:4d:e2:a5:e1:75:
a7:6b:47:87:50:ce:11:a1:d8:87:3b:0f:51:72:9b:2d:28:d8:
36:c4:9a:5c:d4:18:c9:20:f1:b5:54:c4:0e:c6:8d:b6:04:50:
fa:80:87:f6:a6:8d:a8:82:07:1b:44:ad:62:24:fa:86:5e:0e:
31:e5:77:a8:84:f8:99:ae:12:26:c8:a7:e7:24:75:ea:de:a4:
96:c8:75:94:9a:91:e8:e6:ec:d7:c2:d5:f8:94:22:f8:2e:a2:
43:e9:49:fe:f6:f7:3d:c3:98:eb:2d:a6:a4:7f:37:4f:6e:e7:
a9:2c:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:14 2025 by rpki-client