Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: PD1C9CuykX76ATvzndf/w8Z2vCL4PKzUu45K4Rc6PkI=
Subject key identifier: A2:26:C1:80:D6:26:92:24:E9:09:EF:EF:D6:E0:81:66:5D:BA:01:39
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 01963FFA759281D3485FF6A933AFBB6F6A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 19:01:40 +0000
Manifest this update: Wed 16 Apr 2025 19:01:40 +0000
Manifest next update: Thu 17 Apr 2025 19:01:40 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: 8Zl1HEy7hG1sF8V+T2GT2cZN9i6F2IlNf/xvlBPrjbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:75:92:81:d3:48:5f:f6:a9:33:af:bb:6f:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Apr 16 19:01:40 2025 GMT
Not After : Apr 17 19:01:40 2025 GMT
Subject: CN=a226c180d6269224e909efefd6e081665dba0139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:f9:e0:02:46:0e:df:e2:c2:a1:04:97:d1:
c4:33:96:28:dc:cd:5e:a1:a4:8d:61:f5:54:4b:f0:
4c:aa:be:d9:23:b3:89:19:3c:14:5a:10:84:02:45:
89:3e:9d:da:e1:33:00:ed:ff:4b:b7:48:2f:9a:b0:
44:b7:89:10:8f:24:e0:c6:ad:e5:91:a0:aa:d3:9b:
52:f4:66:58:93:f2:c3:9e:e3:81:5c:3c:ee:9b:47:
89:54:6d:f4:90:34:0d:06:66:a7:ff:b8:b5:1a:c2:
34:35:f2:17:a6:4e:cb:65:3a:eb:03:6c:97:ea:83:
e5:75:db:1e:06:4e:91:47:ae:bd:b6:fd:a7:14:06:
58:b2:c5:91:cf:96:ca:d9:f4:cf:10:9f:00:d3:ad:
82:15:59:8f:c3:4a:ae:85:b0:04:26:c0:9c:a5:91:
2c:ea:0d:d1:5a:a5:d0:75:74:20:e9:f5:c1:24:72:
81:07:7c:19:d4:27:81:c9:82:c7:6e:6e:62:ff:84:
7f:fb:5a:a0:12:ab:7c:6c:26:b9:a3:eb:40:e4:f0:
63:49:25:01:71:fa:9f:cf:33:aa:a6:84:64:b5:fd:
8d:14:81:ff:bc:1f:2c:5f:cb:e8:fb:b6:8c:65:ff:
4a:a4:83:55:4a:fe:58:7c:cf:5b:9d:41:fa:68:fd:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:C1:80:D6:26:92:24:E9:09:EF:EF:D6:E0:81:66:5D:BA:01:39
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:6c:22:98:a3:6e:9d:96:4d:2d:3f:11:54:18:b2:89:53:
7a:d2:f8:86:55:65:a2:b7:c1:d5:a3:f0:80:ba:f2:b4:0b:27:
f7:5c:93:be:02:36:33:62:2a:9b:46:d2:28:41:c8:df:04:3a:
66:60:3e:ac:92:d1:94:8e:78:45:0a:0c:30:b7:99:f3:9e:2e:
2d:b2:77:a7:f0:a6:5e:41:a9:2a:c6:c0:6d:c9:fb:a4:08:d7:
73:4a:dd:15:cf:c4:00:1a:84:82:c2:6e:af:38:b0:6d:e8:8e:
0e:63:1f:1e:83:4f:4c:d5:ed:f9:26:73:5e:03:c1:5d:05:55:
20:25:9b:d6:88:af:9a:93:7e:9d:df:8f:7f:b3:ce:e8:ce:c3:
ce:b9:ce:d5:4e:1d:d7:f9:7f:15:08:ba:2d:58:52:db:06:c6:
cf:0c:c9:ff:27:db:53:e9:39:48:57:81:94:49:98:7e:a4:32:
20:f3:f8:dc:bb:1e:bd:4c:6d:1f:df:ba:97:53:2e:b9:3c:c6:
27:fa:58:97:b7:37:87:02:39:5e:22:58:72:38:5e:b4:0b:90:
6f:fd:cc:0f:47:fb:b0:1d:33:a3:aa:53:3e:22:f7:d0:b4:6a:
9c:69:3f:c7:8e:09:93:03:35:0b:1a:dc:68:89:ed:ca:a0:f5:
d1:f7:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:05 2025 by rpki-client