Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: TjZ2v8FJA34bOWj3nzkMUiEq//mHOquPrcWmKQelits=
Subject key identifier: 21:CD:13:DC:41:9D:B4:C2:68:EF:C1:35:15:F2:B5:8F:1C:8E:7A:CE
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 01964D7E8555DCBEA88F5579B4607093EE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 08CF
Signing time: Sat 19 Apr 2025 10:00:59 +0000
Manifest this update: Sat 19 Apr 2025 10:00:59 +0000
Manifest next update: Sun 20 Apr 2025 10:00:59 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: FqyTS5SKGktXcU91/cYUsaqGzDXnBH5HtksyN4M3Yyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:85:55:dc:be:a8:8f:55:79:b4:60:70:93:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Apr 19 10:00:59 2025 GMT
Not After : Apr 20 10:00:59 2025 GMT
Subject: CN=21cd13dc419db4c268efc13515f2b58f1c8e7ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:68:4e:17:5d:50:8e:f5:40:f0:f3:3a:be:
fc:ab:8a:16:20:90:c9:49:bc:21:3b:26:3a:1c:28:
71:da:40:ce:e7:d9:3b:e7:ee:d1:0f:62:df:0e:85:
fa:1f:11:1f:47:45:0f:cb:d7:4a:e4:b3:bd:10:84:
ab:bd:c3:4e:96:2a:20:0c:72:a7:bd:bf:30:14:00:
db:fd:38:e5:4a:36:b2:99:d0:de:6b:36:d9:21:01:
15:f5:15:74:5a:e8:09:84:64:6a:7d:c3:a2:20:a9:
bd:87:62:11:32:93:a4:37:65:30:4e:f6:bb:e9:97:
99:10:50:a9:89:da:f4:8a:a2:49:ae:2b:25:f4:db:
f3:72:42:a9:af:84:d9:04:7b:63:5e:a8:be:17:ff:
b5:04:97:64:6d:b7:91:c1:18:dc:ca:70:f7:d9:ce:
48:93:3a:7c:4f:5a:e8:c4:be:d4:a6:6d:a0:36:ea:
84:da:74:19:77:af:10:61:c3:b4:9f:09:2f:08:a4:
18:0f:d8:9f:ed:31:63:5d:82:17:4d:60:f0:73:5f:
af:88:c8:46:97:49:da:8e:ef:d5:e7:90:cd:63:fb:
30:ba:3e:a1:ad:1e:43:80:e8:f9:0b:03:51:c3:ef:
68:7e:1b:35:86:b9:18:bb:00:bd:e0:f8:c4:81:1b:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:13:DC:41:9D:B4:C2:68:EF:C1:35:15:F2:B5:8F:1C:8E:7A:CE
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3b:25:7b:0a:22:fe:71:1b:ff:52:6f:65:56:07:c3:10:ec:
42:ad:60:f2:ac:64:c9:f5:75:fb:af:76:32:7e:b6:ad:c6:e4:
88:76:40:34:70:8f:8e:f1:01:4a:41:69:af:4f:5d:68:d3:1a:
fd:d9:44:21:c4:97:5d:20:05:3e:d8:17:a4:72:84:5c:d2:59:
ab:1d:96:f1:dd:00:ca:74:68:1e:63:23:23:88:f2:4e:20:36:
4f:79:38:2a:f1:46:c2:7d:ff:d6:68:d9:57:0b:f2:d6:b0:9d:
b3:6f:21:7e:0f:f1:46:cc:62:be:38:cd:92:75:42:3f:72:a8:
90:9d:b5:ad:8b:26:e1:15:85:33:bf:b4:f4:a4:b8:f9:e6:f4:
62:b9:65:2e:f5:6b:4e:4a:82:91:4d:a7:63:40:5d:9b:7e:89:
8e:46:b1:9f:3f:80:1b:a6:3c:ff:33:04:af:bb:e1:55:ca:ca:
19:ec:16:31:02:5f:6d:cf:4d:e9:14:22:fb:ff:00:4d:29:44:
1c:f2:66:ca:bf:35:59:ae:3f:48:44:7d:79:cc:b2:56:03:36:
0b:dc:81:93:76:56:3e:ac:f1:9c:e9:f6:b3:c9:c7:30:cf:a9:
ee:3a:12:ed:9c:2e:d2:14:bc:36:14:a5:0a:19:aa:75:d5:f8:
f1:ed:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:20:44 2025 by rpki-client