Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: VsWC2Ry+7dkAREz55X2YPxfuKchkfkRR8WXwAXkL7ik=
Subject key identifier: 38:C1:C2:31:18:BD:6B:3F:E6:B3:9F:8C:93:06:E1:29:2D:61:23:64
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 019652A469168F03C87748C93D0D7267D46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 14D9
Signing time: Sun 20 Apr 2025 10:00:28 +0000
Manifest this update: Sun 20 Apr 2025 10:00:28 +0000
Manifest next update: Mon 21 Apr 2025 10:00:28 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: wi4k00PrtLapg+ri7BkuyOsF+7i6iVXpVp5yKP9S9Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:69:16:8f:03:c8:77:48:c9:3d:0d:72:67:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Apr 20 10:00:28 2025 GMT
Not After : Apr 21 10:00:28 2025 GMT
Subject: CN=38c1c23118bd6b3fe6b39f8c9306e1292d612364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:0c:4a:c0:bb:23:e7:7d:f0:16:a8:7b:74:
99:82:d8:93:d1:55:c8:9d:7c:43:12:5c:3d:a2:28:
8e:4b:c3:ac:29:47:7f:5b:cb:80:33:52:52:f7:2f:
74:2d:a7:f1:08:ea:7a:5c:ea:1e:5b:dc:fc:00:53:
4a:1a:21:fe:eb:e9:a2:e8:d3:f2:63:16:03:c5:f1:
a3:11:d8:2e:e4:17:cb:a6:bb:9b:c7:96:4c:8c:5b:
bf:0a:0e:a5:13:04:9b:80:d3:5a:c3:63:bb:5e:2c:
84:54:f3:2e:d8:d4:e9:5f:a7:f7:86:d4:81:75:41:
af:83:86:07:d0:86:37:d7:97:17:31:db:18:2a:74:
f8:db:23:93:61:58:c5:eb:9a:98:ae:38:ad:12:4b:
85:65:e0:68:cd:5f:52:98:1b:ca:37:58:e4:f3:24:
6b:f3:18:b2:a5:af:62:ce:6f:06:f0:9d:6f:0b:24:
02:8b:ca:d4:9f:55:3c:e3:ce:a0:d9:d2:af:2c:15:
c2:6c:bb:89:16:e2:b3:21:33:72:a0:1a:ca:57:6c:
73:a1:ee:17:c3:ce:b8:07:5a:6d:50:55:f0:2c:f7:
5a:bb:37:4b:22:93:42:ba:ec:95:84:80:bc:62:b7:
60:7e:79:e5:f2:2e:25:5d:a3:e1:8e:4a:d9:51:a1:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:C2:31:18:BD:6B:3F:E6:B3:9F:8C:93:06:E1:29:2D:61:23:64
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:ce:8c:bf:8c:28:93:fa:6c:fa:52:2a:8a:d4:49:47:6f:
f4:b3:ca:c9:9c:79:5c:f0:29:a5:1a:76:a5:79:7a:81:92:0f:
a0:2b:2d:fd:b4:b2:7a:5b:2d:75:05:c9:be:c7:e7:02:8d:ed:
ba:21:cb:0b:7a:3e:df:d7:90:a3:6e:c4:9e:4f:db:8b:a7:94:
df:c7:20:52:56:a9:8e:0b:cb:8f:7e:ee:0b:6f:8a:b5:ed:a6:
93:99:e9:04:dd:37:73:4c:b6:a7:6c:71:e2:32:3d:5c:24:54:
dd:86:be:d7:15:43:c2:74:53:8e:05:8c:50:2f:eb:be:a4:a0:
97:c5:e5:79:ce:b1:f8:9e:4b:ab:68:42:40:aa:3d:1c:34:54:
42:f0:92:08:f8:02:c6:2c:f3:1e:bf:b7:62:75:af:1d:24:3f:
dd:25:90:99:3a:ec:b5:f2:42:be:3b:4f:ee:e1:73:75:58:94:
99:ea:8a:5c:e8:9a:ea:e5:a2:50:ab:ca:94:5b:a5:58:14:30:
be:6c:5d:38:fd:f2:29:f9:79:b2:63:9e:e1:93:cd:f4:a7:cd:
23:2e:8a:7a:a7:f3:7c:46:b7:5c:93:87:4d:7f:b5:66:bf:dd:
51:cc:eb:78:8d:10:2d:3b:f0:59:4b:0f:b1:65:3d:c1:17:64:
f3:94:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:19 2025 by rpki-client