Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: YHDWo6HdWLvxYzg7Pkza3EpQUfpufQuJsYt6P5qiN7Y=
Subject key identifier: FA:6B:0F:65:5E:D8:3C:FC:0A:A2:C4:51:9D:7E:5D:1A:74:0C:9C:B2
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 0196591582E462CF2403B4B1898E84B9B05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0BD4
Signing time: Mon 21 Apr 2025 16:01:44 +0000
Manifest this update: Mon 21 Apr 2025 16:01:44 +0000
Manifest next update: Tue 22 Apr 2025 16:01:44 +0000
Files and hashes: 1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: jGfHlBC6pcNSEV1hxyGXgKwt39/z41+2hPXC4EAk7dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:82:e4:62:cf:24:03:b4:b1:89:8e:84:b9:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Apr 21 16:01:44 2025 GMT
Not After : Apr 22 16:01:44 2025 GMT
Subject: CN=fa6b0f655ed83cfc0aa2c4519d7e5d1a740c9cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:a8:ba:e8:e8:c6:13:84:1d:2e:9b:1d:ad:
c2:ac:78:f4:7d:0d:91:00:45:ab:98:d7:61:f2:32:
fa:f7:a3:a3:5b:ee:c1:fe:65:ae:fb:99:01:06:6d:
48:69:69:17:35:87:c4:f1:8f:0a:42:78:e5:5e:21:
16:e6:c3:a0:c6:b6:9c:69:6d:fc:a5:2d:1d:23:ca:
9a:46:9d:c2:4c:27:62:58:8f:7c:ee:8c:4e:16:af:
67:87:50:00:08:5c:d1:05:ad:1f:fc:3d:00:1f:2f:
2c:9b:60:a5:47:3f:56:1d:d0:1a:cd:8d:d7:a0:a4:
f7:01:f2:59:2d:cf:dd:26:5e:e5:7b:85:31:30:ff:
43:3b:85:29:43:ab:e0:fb:a4:1b:95:08:7b:2d:6a:
20:8d:6b:3d:41:be:0b:4d:f8:68:f0:f7:6c:c2:b1:
6e:f7:a4:6c:a9:ca:da:94:70:b2:78:7c:b8:90:77:
97:19:dd:a0:42:c8:ca:37:bf:d7:d3:05:03:a0:38:
0f:f7:29:ef:ea:83:be:42:43:86:2d:8e:8a:ef:f1:
0a:cf:42:18:3e:ab:c8:c5:06:bb:6a:1c:41:cc:b9:
e0:7d:55:9a:b2:6f:0b:54:01:e4:2a:41:4a:1c:97:
83:0e:79:d1:c8:e0:3a:3c:b6:1c:26:e8:2e:90:c1:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:0F:65:5E:D8:3C:FC:0A:A2:C4:51:9D:7E:5D:1A:74:0C:9C:B2
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:cd:09:fc:c1:d5:24:81:3b:29:c3:6d:29:08:1f:3f:2b:
7a:ba:66:68:19:4f:14:d9:9e:0c:34:3a:70:76:fb:00:49:e0:
b4:db:84:0c:b5:79:c5:e3:3b:94:2d:0e:74:90:96:c8:0c:7e:
54:e1:ac:3f:c6:91:7b:ee:91:30:06:d1:ee:66:1a:2e:c9:fe:
50:b9:28:1c:dc:3d:48:05:96:7d:de:b9:db:db:0a:e8:c9:7c:
e4:f9:31:d3:e8:35:f0:c7:0a:1f:a3:58:d2:4b:5a:b1:4a:ce:
e6:c1:1a:ed:71:e0:41:8e:1a:2a:11:1b:b0:82:eb:b2:27:10:
c7:1f:10:9a:e9:04:59:5f:f8:5e:cf:9a:6d:e0:a0:1e:bc:0f:
4f:fb:9a:c5:6e:56:54:ae:a7:f9:5f:ec:6c:f2:d2:5e:14:7d:
15:9d:52:45:29:ea:fa:cc:ae:f4:e0:ca:10:02:f1:f4:c2:a7:
34:10:63:b1:9f:b3:27:79:68:3e:a1:aa:e5:0c:f9:fd:6c:8d:
f4:45:29:18:b6:b6:ca:4f:b7:75:9b:7f:ba:01:da:35:84:a1:
3b:44:8f:da:58:6c:f6:e8:ef:1d:1c:59:ab:a3:7f:16:bc:a0:
91:d1:ee:d2:3d:83:e0:7b:bb:f5:58:b2:0a:dd:7b:da:7a:b5:
c8:15:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:46 2025 by rpki-client