Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
File: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft (raw, json)
Hash identifier: q0GldEiPQ+o3IkvvUvYYT+kmc43jjgfXRHUrQicex9I=
Subject key identifier: E6:10:C0:4A:97:96:53:7C:B9:D7:08:12:08:68:9B:D1:84:8A:9D:1D
Authority key identifier: 55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Certificate issuer: /CN=5517c90523f5664180f71e3060dda23172e4cf75
Certificate serial: 01964D7DF17360A8CC64FAC66A8AA0C5279D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
Manifest number: 0DD0
Signing time: Sat 19 Apr 2025 10:00:21 +0000
Manifest this update: Sat 19 Apr 2025 10:00:21 +0000
Manifest next update: Sun 20 Apr 2025 10:00:21 +0000
Files and hashes: 1: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl (hash: UKbgVx8T5qNJ9S704PvMhvDTZN6TmUam53WHb5EhO7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f1:73:60:a8:cc:64:fa:c6:6a:8a:a0:c5:27:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5517c90523f5664180f71e3060dda23172e4cf75
Validity
Not Before: Apr 19 10:00:21 2025 GMT
Not After : Apr 20 10:00:21 2025 GMT
Subject: CN=e610c04a9796537cb9d7081208689bd1848a9d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:8b:40:1f:35:df:60:29:83:90:d1:07:67:
78:5b:8c:c5:e5:d5:20:d8:2e:d4:f5:a5:9e:f2:39:
58:c8:5a:f9:50:e6:84:c2:f4:d9:52:a3:d0:34:74:
18:1a:92:1e:33:76:cb:43:7a:e8:12:10:f7:81:28:
66:38:02:d5:05:40:ea:ea:94:13:64:0e:a2:b7:89:
1b:73:1c:45:1b:f5:6a:27:a7:db:d8:48:f4:68:7f:
f9:ea:f5:3f:04:1c:4e:9e:46:e1:c0:09:1f:8b:e0:
ab:cf:1e:6f:83:2a:5b:be:04:21:3f:78:f2:5b:74:
53:3b:1e:88:21:86:02:26:21:01:f8:cb:7b:77:14:
95:1c:89:14:a7:3a:38:86:9c:cc:05:98:79:e6:62:
6e:bc:e9:76:22:b6:ef:c5:4a:44:7a:3f:f6:05:52:
c5:d8:ce:09:e3:7e:a0:f1:14:b1:3e:fc:b9:09:f6:
6c:06:63:63:6f:01:aa:e0:8d:8f:c0:aa:6d:38:d2:
84:30:69:f8:ff:f2:41:a2:ac:bd:c2:fa:78:46:d5:
ff:f2:07:d3:3b:84:71:ec:40:80:8c:7d:06:36:37:
51:19:41:f0:69:8c:92:ce:f6:91:d2:9f:65:5e:01:
82:72:e7:79:63:48:61:22:cf:3d:39:98:87:38:3e:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:10:C0:4A:97:96:53:7C:B9:D7:08:12:08:68:9B:D1:84:8A:9D:1D
X509v3 Authority Key Identifier:
keyid:55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:57:85:aa:3b:bb:eb:34:09:5d:ec:2c:3c:dc:2c:6f:da:
b6:f2:df:06:d6:82:33:c6:12:eb:20:54:59:ad:6a:32:89:dd:
3c:d0:88:2a:3e:d0:aa:c9:08:46:d8:0b:9d:9c:78:7d:63:54:
9c:78:27:ca:8e:14:a8:b1:c0:40:7f:3e:db:90:b8:85:22:05:
4c:7e:35:dc:70:9a:5c:6d:23:6e:42:18:c0:bd:8d:5e:f2:4b:
02:22:23:ed:b9:2a:5d:6d:f4:bd:e7:8d:9e:eb:47:1e:29:54:
a3:a0:f5:5e:ac:0a:c3:60:ea:4f:79:8d:9b:b0:e3:0b:9e:39:
9f:a8:40:49:b6:43:32:02:60:a1:3d:00:66:a1:b3:00:c6:69:
44:cc:f4:58:4a:01:ff:28:71:00:f6:f3:6e:94:3c:7a:f9:60:
41:94:9a:6a:94:a4:64:61:64:1d:83:88:3f:ad:ee:4e:99:40:
6a:b9:e0:5f:46:d3:8e:d3:24:a4:11:ec:20:c6:7a:62:f6:9d:
7b:dd:ad:34:bd:fa:f3:7a:92:05:86:2c:0e:20:0b:74:7b:58:
d7:a7:ad:aa:72:e7:07:c5:e0:22:03:7c:90:21:53:9c:b9:9e:
83:53:ea:00:55:01:61:d0:4a:32:07:58:5f:86:11:cd:07:ba:
06:ae:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:01 2025 by rpki-client