Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: uNVQJOjjRkJWnh64pcP9haImwY1xwDqiHQW8x3CuxNc=
Subject key identifier: D8:99:B0:0C:1E:31:AD:A3:A8:4E:15:04:01:33:A5:52:29:50:E1:05
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 019611A172C60028519C0C54E1784BE6EF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 09C1
Signing time: Mon 07 Apr 2025 19:01:55 +0000
Manifest this update: Mon 07 Apr 2025 19:01:55 +0000
Manifest next update: Tue 08 Apr 2025 19:01:55 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: nlJ7Vn/aC3gv/h5IQ4/jstJ/4hwuQfcH97tTjL2cUJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:72:c6:00:28:51:9c:0c:54:e1:78:4b:e6:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Apr 7 19:01:55 2025 GMT
Not After : Apr 8 19:01:55 2025 GMT
Subject: CN=d899b00c1e31ada3a84e15040133a5522950e105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:e3:46:3b:f8:eb:45:f1:a6:83:c7:0d:8f:
71:ee:71:18:fe:69:ef:47:6b:47:d1:c6:bf:5a:60:
9b:cb:e4:0a:1a:c8:14:c5:02:4e:d9:36:95:64:48:
df:c9:54:91:08:62:21:68:95:19:c9:2e:4c:6e:30:
c0:a8:aa:84:f5:28:38:97:d8:be:ed:9a:7a:f3:01:
92:c7:cb:d5:04:40:5c:39:c2:65:27:11:8f:a3:15:
22:59:56:4e:0a:ea:fa:50:df:f7:00:3a:0e:4e:59:
7d:c5:c4:3e:17:65:cb:0d:99:4b:35:e1:76:6d:44:
7c:0a:5f:99:56:fa:26:b0:56:72:d4:3b:6b:34:b1:
f8:25:6d:e6:01:c9:19:65:0b:33:8f:9d:29:8a:ae:
4f:1a:5c:7e:09:27:a1:f0:37:d8:ed:8d:70:8b:57:
6a:d4:b6:d8:2b:88:10:67:cc:cd:f8:65:cd:81:74:
76:da:fc:d1:e0:2b:a4:30:e7:04:e2:ec:ad:78:97:
30:49:dd:b2:2b:a5:3a:54:b7:22:d2:c7:c1:96:a0:
bd:8d:16:31:dd:6b:54:5c:92:67:2e:48:10:d2:eb:
2b:f8:87:38:12:00:a4:61:07:76:7f:8d:c7:25:e1:
24:55:93:6e:d4:23:1c:62:e7:e5:28:7c:fb:ea:87:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:B0:0C:1E:31:AD:A3:A8:4E:15:04:01:33:A5:52:29:50:E1:05
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:02:93:c6:f6:9c:f3:2a:1f:4c:27:0d:01:ae:c4:2d:c6:
01:ef:28:41:05:41:56:60:6a:0b:32:e1:c7:1a:ed:9e:4d:a0:
36:9b:3c:cd:02:c1:3d:cf:78:2a:de:28:7f:f3:50:2e:ad:43:
1b:79:b8:1b:2b:af:56:b2:88:f8:9b:77:d6:30:6f:7b:e2:0d:
05:4f:29:c4:05:90:7d:76:39:23:79:c3:6c:6b:98:9c:51:22:
ad:54:fc:f3:55:0a:48:22:57:6d:4e:07:70:a5:06:0f:0c:ed:
fd:f2:0f:6c:be:28:78:f4:bd:65:8a:9e:15:5e:fc:3f:d6:07:
bf:7a:80:b0:a9:ef:fa:3b:e3:8e:ce:f1:46:5c:8c:d1:ea:5b:
a9:7c:b8:fc:b1:42:ec:55:7a:c5:cc:33:4f:c1:7d:0b:7f:f2:
5a:9a:1f:8a:85:22:1f:30:9f:a2:06:98:7d:fc:08:44:6b:14:
a1:ac:90:1c:64:81:2a:ee:a3:55:79:b5:40:0e:5a:59:ea:bb:
01:86:51:a4:95:b9:7e:16:d2:e6:a8:55:3e:07:ef:98:bf:d2:
3e:fe:fd:99:95:d5:b1:5b:ee:f7:d9:5d:80:73:9d:ba:8e:10:
16:45:e4:bf:91:de:c4:7f:09:c3:91:d5:b0:46:b6:16:a9:4a:
9b:d7:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:50 2025 by rpki-client