Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File: ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier: lSp/+jqERlLh+u76W5twJ7sVWBIanDoyoOGhv5f/Sxw=
Subject key identifier: 21:32:EB:01:8A:1A:ED:BD:04:D8:AB:8B:B2:81:C5:02:CE:53:4E:4E
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer: /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial: 01964C6B346399EF5F0BA6E556DCBE593714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number: 14F5
Signing time: Sat 19 Apr 2025 05:00:16 +0000
Manifest this update: Sat 19 Apr 2025 05:00:16 +0000
Manifest next update: Sun 20 Apr 2025 05:00:16 +0000
Files and hashes: 1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: kJiZhgTxEN0NVBcEqqIX/x5C2KnMoqk2fesrkMrWwc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:34:63:99:ef:5f:0b:a6:e5:56:dc:be:59:37:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Validity
Not Before: Apr 19 05:00:16 2025 GMT
Not After : Apr 20 05:00:16 2025 GMT
Subject: CN=2132eb018a1aedbd04d8ab8bb281c502ce534e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:40:f2:fd:5d:65:23:02:a5:e5:6c:89:54:
45:72:a5:67:1e:e7:cd:98:70:44:46:cd:24:cf:ae:
6b:ad:65:61:df:68:66:b2:f8:37:1b:87:b3:22:58:
b7:de:8b:5b:1d:77:30:c2:0a:3f:07:32:a7:fd:1e:
be:ff:0b:60:28:99:dd:ba:0c:13:67:88:ce:2a:32:
8e:d8:37:7f:94:8a:b0:96:3f:5b:72:6b:7f:a2:eb:
3c:e7:07:f0:20:4c:d2:3f:62:50:a5:41:ef:37:94:
68:c5:32:87:d3:db:aa:31:7f:24:63:e2:ce:a4:53:
10:21:6e:7c:94:25:07:2e:8f:29:0d:4c:3e:e8:a5:
27:ff:2c:2d:fc:75:06:83:65:f4:2f:0a:8e:78:c3:
81:ef:eb:c4:2b:33:3e:96:76:8c:ea:a0:4a:4c:90:
99:1d:40:6b:64:5d:e2:48:d7:07:08:53:7c:2c:fc:
e5:c2:a9:17:24:56:1d:c5:33:be:1c:5f:c2:63:dc:
0f:cd:af:80:2b:30:8f:f5:f6:ab:21:98:92:52:4f:
c1:9b:80:af:7c:14:44:51:53:2b:4a:8e:11:cc:31:
d6:fd:48:12:5b:5e:f6:33:0a:ee:59:58:e6:eb:de:
ef:2f:ea:47:71:8b:b0:4e:b5:2f:c4:bd:ee:b6:86:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:EB:01:8A:1A:ED:BD:04:D8:AB:8B:B2:81:C5:02:CE:53:4E:4E
X509v3 Authority Key Identifier:
keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:7c:23:90:aa:93:e7:c6:80:ab:f3:33:74:9d:a8:1a:ef:
6b:fe:83:6e:90:ec:8b:77:b1:36:c1:3d:c8:1e:81:e5:41:33:
8b:70:76:87:b1:ca:95:9b:9d:bd:f7:dc:5d:f3:93:d1:0b:9d:
89:40:41:5b:b6:36:c7:5c:73:d2:53:29:94:dd:84:b1:ea:96:
6b:69:05:82:1f:80:97:23:be:5a:db:40:ff:cf:9b:64:36:58:
6c:b3:c3:55:8c:4f:69:e1:19:28:cb:49:a9:51:0b:41:e1:4b:
2b:ba:5f:2a:71:a5:27:68:3f:67:35:01:16:ff:34:e5:43:0f:
96:07:02:cc:99:94:50:b2:7e:fa:5c:60:0b:97:7d:0c:9c:e2:
ef:67:74:7a:ef:41:07:5a:fb:dd:79:14:d9:10:19:b2:f4:30:
da:5f:17:44:c8:7d:c4:61:08:fb:08:d1:c4:ea:1d:34:45:94:
43:1d:93:19:4b:83:e1:9a:78:1f:6e:d3:42:ae:c3:79:ab:b9:
1c:a6:cb:38:70:80:5d:a2:6d:4c:45:d2:b7:a8:3d:bb:b4:47:
45:50:5e:13:b0:ef:71:a8:22:8e:02:84:a3:48:4a:a9:4a:ff:
b3:91:1f:2c:fe:e5:b1:2e:06:8d:c3:2c:f9:14:9e:3b:4e:d6:
75:d6:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:57 2025 by rpki-client