Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: C1Vn0dtLS8PoLgFHTzLKzALYCugpLR5ncI4Fj9Mzw0I=
Subject key identifier: 42:FD:36:6D:B6:B7:E0:31:03:76:A0:94:D8:37:CE:9C:F8:5B:20:EA
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 01964D7ED10BC8DA93548FF85D918B6DA3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 0479
Signing time: Sat 19 Apr 2025 10:01:18 +0000
Manifest this update: Sat 19 Apr 2025 10:01:18 +0000
Manifest next update: Sun 20 Apr 2025 10:01:18 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: CnmuU9fsYskzRcPgrZSd911AAjg7CAy3+6fylAXHsHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:d1:0b:c8:da:93:54:8f:f8:5d:91:8b:6d:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Apr 19 10:01:18 2025 GMT
Not After : Apr 20 10:01:18 2025 GMT
Subject: CN=42fd366db6b7e0310376a094d837ce9cf85b20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:77:27:0e:5c:97:9c:00:79:b1:5e:b9:bd:
08:43:aa:f1:7d:12:33:e0:69:19:8b:07:58:80:7e:
6b:68:cf:5b:68:42:fd:ef:d4:99:28:a3:b8:fe:de:
e4:00:e8:dc:76:a6:a3:57:72:9f:57:dc:57:0c:ab:
e5:0a:de:5e:ec:de:6e:e5:28:57:4f:89:bc:1d:b0:
de:b1:9e:20:3e:00:15:5c:1d:cb:cf:b0:10:2b:54:
d6:d3:3b:a0:3d:88:5f:8e:29:53:7a:4c:d9:09:b4:
f5:9c:f0:ba:32:1f:e9:7a:a3:ba:4b:30:79:26:1d:
33:f2:33:1f:1c:bc:f6:32:38:72:b1:94:59:ef:d8:
f9:44:5a:b6:56:91:eb:d8:e6:e0:48:b8:53:5e:5c:
5e:dd:b3:51:71:3c:b7:08:3f:b9:39:33:d4:04:61:
5f:93:b0:f9:be:f7:3c:f1:0f:c6:46:86:83:3f:67:
b7:ca:04:fd:2b:e3:7b:3c:a9:f5:c9:ed:21:c8:e5:
af:6c:91:82:24:22:7f:f0:65:8b:60:5e:cc:36:19:
67:ce:e1:48:50:14:37:8f:27:19:c8:aa:2f:ae:ca:
2f:20:2f:d3:b9:f2:a1:b4:8b:30:e6:e4:d7:73:7f:
31:db:4d:00:f0:91:f2:37:0a:d3:ca:13:55:2e:41:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FD:36:6D:B6:B7:E0:31:03:76:A0:94:D8:37:CE:9C:F8:5B:20:EA
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:21:b8:6f:7f:2b:7f:cb:9e:b2:df:c8:1c:7e:e4:e6:56:d3:
a7:c4:24:57:ee:4e:34:4c:69:80:7e:94:a4:b0:22:fb:f5:30:
e2:e5:65:80:47:37:b8:7b:8d:e5:23:b7:37:09:23:e5:40:60:
b7:79:55:1b:4e:44:bc:f8:c4:82:17:a2:18:ce:7c:a4:ba:fd:
e0:79:f2:3a:64:1e:8f:f8:0c:0b:04:7b:ee:f4:19:10:99:f7:
9f:7e:7f:a2:79:73:12:df:ce:48:b2:51:a8:87:98:ec:e3:19:
c9:fb:7d:9f:55:68:85:f0:43:37:a3:b3:4b:6d:d7:51:85:14:
2e:98:de:85:6a:83:74:92:b5:1f:97:f5:eb:db:90:2e:d4:50:
56:64:26:83:9b:8c:22:07:a4:e7:6f:60:dd:9f:f1:37:bb:ea:
cd:34:89:83:3e:2c:dd:46:a9:38:f2:2f:9b:7f:40:78:4f:bf:
08:d6:97:59:42:75:e4:1f:0e:88:3a:3d:25:7d:e3:dd:a2:ac:
a0:b2:6b:7e:0e:3f:02:91:d1:ea:19:3a:ff:2a:c1:ca:6f:23:
99:84:95:f9:6a:d9:99:88:77:2d:6f:82:22:95:43:f3:cc:5a:
3e:51:c1:2d:99:8e:5f:7b:31:da:0f:15:8b:9f:42:3d:3f:b0:
5a:42:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:29 2025 by rpki-client