Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: ZWrw9rhI3E75eP+mmzB+k+GmNiqYcIHZdlGYEsomnxM=
Subject key identifier: 90:0D:2C:A1:7B:41:57:22:5D:97:96:FF:91:11:1A:2C:6C:33:EB:95
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 019645C5FCE10EE4E9B2D978E7E944F9C4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0828
Signing time: Thu 17 Apr 2025 22:02:05 +0000
Manifest this update: Thu 17 Apr 2025 22:02:05 +0000
Manifest next update: Fri 18 Apr 2025 22:02:05 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: W3HrWwal+5dBS6n2MoPBXSNy3Wn1U25nvbt2h9a/4xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:fc:e1:0e:e4:e9:b2:d9:78:e7:e9:44:f9:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Apr 17 22:02:05 2025 GMT
Not After : Apr 18 22:02:05 2025 GMT
Subject: CN=900d2ca17b4157225d9796ff91111a2c6c33eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:57:8f:22:b7:a5:cc:38:a0:0a:0d:0c:21:
93:07:f4:34:21:fd:b9:e3:86:a6:04:c7:b6:50:88:
79:94:6f:c5:a8:b6:11:58:28:28:b0:e8:91:46:9e:
2c:9a:84:cf:14:3f:43:2e:cf:d6:e8:66:b9:60:02:
2a:76:48:c8:e5:43:30:ea:7c:c5:f6:d7:28:8e:52:
fe:8e:56:cd:f5:66:00:1e:32:83:c2:e3:d9:31:13:
57:46:c3:79:d4:dc:a6:73:a9:96:9d:c7:cc:ba:1b:
10:be:08:07:14:de:19:3c:6e:ab:8f:3e:95:cc:e2:
af:97:7e:cc:c0:ec:82:96:36:f5:71:fd:04:94:d4:
21:39:0d:ed:9d:74:23:a7:b5:3f:b6:65:a5:05:e7:
42:ef:e2:0c:a2:20:82:0f:26:d1:89:42:73:0c:3e:
d0:b9:d1:e9:7c:dc:21:f2:d3:a8:e0:36:f1:30:b6:
ae:2f:e1:69:c9:3e:b1:fa:aa:de:b1:3c:9f:17:c5:
8a:00:ff:5b:b6:51:3e:b7:41:30:18:0b:35:54:f8:
d2:67:0e:a7:48:43:d0:8e:26:8b:73:98:82:6a:52:
79:e8:37:db:bd:77:dd:ba:4a:d9:2b:a4:cd:b1:0e:
2c:ec:e0:3f:bb:c6:69:7f:6d:4b:32:94:a3:f7:8b:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:2C:A1:7B:41:57:22:5D:97:96:FF:91:11:1A:2C:6C:33:EB:95
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7b:ec:69:66:0e:79:47:8f:88:bb:75:d9:69:f1:9d:8f:21:
e6:83:43:e1:c0:61:e4:60:e3:23:50:8c:f5:0f:14:82:5d:0b:
d7:5d:c7:0f:ce:02:b2:30:b4:3b:1e:64:ae:e5:b9:57:51:38:
7d:a2:1d:69:b6:4c:b9:88:6f:30:34:1d:e7:77:e8:fa:c2:56:
7b:b3:8a:81:93:dc:fd:dc:51:1f:e3:22:10:8c:c0:9a:eb:01:
f0:20:0a:1d:26:d7:f9:4e:3b:96:3e:cf:9c:55:ab:ff:fe:1a:
71:27:01:e7:02:09:20:5a:1b:da:ca:97:4f:16:40:8a:3a:ff:
be:a5:3a:67:e2:87:0d:01:8c:83:f7:8e:f4:9a:09:62:0f:a6:
08:ed:92:d2:28:9d:8c:84:4b:97:2b:41:b1:3f:42:48:38:60:
3d:b9:e4:ba:4e:03:5c:4f:3b:0e:c8:c8:98:8c:56:57:cb:e8:
e4:89:68:72:89:3f:55:64:59:0a:9e:10:a8:2f:f6:f1:b0:94:
0d:94:cb:12:df:16:e0:54:61:a5:dc:8d:8a:0c:8f:84:80:cb:
9a:63:78:13:71:e4:d7:03:6f:de:b9:f0:ee:6e:1f:84:ef:10:
d7:f9:13:54:ea:4a:bb:2d:dd:8b:af:04:4a:1b:fe:34:9d:76:
5a:59:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:26 2025 by rpki-client