Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier: IgPnIPF3O61XUu7n3rvrDzS5Y62k4GCxZOejnA6YtWA=
Subject key identifier: 38:A3:92:08:8E:E2:D8:16:FC:B2:C1:0A:22:AA:75:BF:0A:29:7B:16
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial: 019646A0CAB47CA40CEE91DE32E7E38D8E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number: 02D2
Signing time: Fri 18 Apr 2025 02:01:04 +0000
Manifest this update: Fri 18 Apr 2025 02:01:04 +0000
Manifest next update: Sat 19 Apr 2025 02:01:04 +0000
Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: t00YWswjLaEYU3z5cJL2T9Ry/TbyrrSYi+CoBagxUuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:ca:b4:7c:a4:0c:ee:91:de:32:e7:e3:8d:8e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
Validity
Not Before: Apr 18 02:01:04 2025 GMT
Not After : Apr 19 02:01:04 2025 GMT
Subject: CN=38a392088ee2d816fcb2c10a22aa75bf0a297b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:2b:2d:35:b8:9e:ed:f4:2d:b3:47:55:23:
0e:0f:7a:f4:94:3a:b5:a9:1f:bc:85:8b:5c:07:e4:
06:ca:08:51:b2:d1:ca:77:36:2d:21:28:b8:35:e0:
93:30:a3:ed:f7:42:d0:9b:91:6c:62:36:5c:b2:1d:
2a:33:f7:50:97:aa:e7:a4:77:14:c6:31:b1:e3:36:
5a:1b:1f:7a:37:bb:d4:9b:d3:87:78:19:15:24:c5:
78:86:a3:ef:37:1e:42:27:6b:c8:e2:7f:1e:3c:d6:
81:5b:ee:f8:0a:da:a7:01:69:07:fd:28:f3:2a:34:
e9:9c:b3:3f:68:d7:a8:d7:be:a0:14:61:6c:9d:00:
fc:c4:8d:50:12:30:98:76:e1:bb:f6:5f:0f:ee:cd:
74:53:af:3a:ad:51:6a:27:7f:7c:20:ea:e2:06:cb:
99:b0:0c:ff:80:63:08:d8:d2:67:1b:e0:84:1a:03:
d9:5b:12:14:ec:77:2d:61:a2:b3:34:dd:3b:89:94:
86:05:bc:9f:22:dc:a3:cb:8a:14:f0:ac:39:2d:26:
a5:d5:8b:4e:67:0b:39:88:11:6e:92:45:ed:29:75:
99:25:d1:7f:c5:e4:89:46:5b:b2:f9:e9:38:41:29:
3f:d9:7b:18:f6:62:83:8c:fa:fa:2b:24:43:9d:f1:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:92:08:8E:E2:D8:16:FC:B2:C1:0A:22:AA:75:BF:0A:29:7B:16
X509v3 Authority Key Identifier:
keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4a:a7:19:6a:10:f1:55:58:e2:f3:61:5a:5f:56:54:65:f1:
8d:25:85:d3:80:25:80:e8:df:a7:09:66:e5:ed:c7:20:5e:d8:
cf:e9:be:4b:28:cf:4b:6e:10:ba:7c:67:5d:63:1d:dc:1c:e0:
82:65:8b:16:56:da:c0:59:36:94:67:60:1f:21:22:48:92:e9:
a5:7d:1d:76:8a:22:41:f9:8d:4d:13:1a:82:ec:f7:52:bf:ec:
b9:ec:83:60:51:23:60:96:02:bc:66:0f:02:2d:30:2d:c3:57:
d2:4f:40:29:22:52:df:89:0d:1e:be:55:ad:e3:5b:37:2d:f1:
27:a4:7f:be:90:33:c4:cb:51:8d:a1:5a:0b:0e:f8:46:6e:1f:
2b:be:22:c6:ce:3c:ec:cd:cb:cf:fd:ab:75:d6:11:bc:cd:f7:
2b:4e:74:0f:05:55:64:6e:a7:13:04:af:74:17:5c:04:84:66:
cb:8c:7c:7e:d9:af:63:ae:09:ba:36:3a:ce:ef:2f:0f:8e:92:
a2:7c:91:c4:ef:ef:2b:a7:96:7c:c3:b9:24:aa:d6:08:ad:a7:
87:2e:a4:80:da:c6:59:56:ae:05:5c:66:a8:d6:4a:c1:0c:1d:
1c:64:b7:d0:8f:69:d9:2a:64:74:7c:a8:b1:a4:79:56:13:2b:
b4:2c:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:48 2025 by rpki-client