Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: W1JOdfOM1xaWzg4rvH5WUewDtrmNTXBTh8x3u/f5IQw=
Subject key identifier: 4F:50:C2:32:30:FD:CA:41:5B:63:F1:B2:AF:62:9A:9F:38:6F:76:07
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 01965348FB396D4E130AEA2D81E5D106B632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 0B55
Signing time: Sun 20 Apr 2025 13:00:13 +0000
Manifest this update: Sun 20 Apr 2025 13:00:13 +0000
Manifest next update: Mon 21 Apr 2025 13:00:13 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: Luz/VrH7u+rA8ipJIRasL00yQU/Y1iR3buZB4LnEcaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:48:fb:39:6d:4e:13:0a:ea:2d:81:e5:d1:06:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Apr 20 13:00:13 2025 GMT
Not After : Apr 21 13:00:13 2025 GMT
Subject: CN=4f50c23230fdca415b63f1b2af629a9f386f7607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:da:6b:31:ed:fa:ae:8f:e5:d9:a5:33:ea:
d9:f3:cc:2a:ce:45:a8:ba:82:8c:5e:ca:76:33:fb:
4f:fb:ca:ab:ca:c8:97:a9:37:6c:3c:5b:4c:0f:5a:
62:46:de:50:29:a6:c2:95:f5:ac:85:ce:fe:42:52:
33:c7:ae:58:dc:b9:4c:7c:e9:6c:3c:38:b4:f7:fc:
38:df:49:31:3b:b4:8e:87:00:bb:ec:a9:55:10:1c:
e6:16:bd:8a:8c:a6:4a:a3:8a:92:60:22:0e:47:2b:
72:b0:0e:8a:4d:d1:b8:98:d2:45:eb:d3:47:7b:03:
4f:fd:3f:cb:3e:1d:29:02:4c:ad:37:13:c0:58:50:
62:e0:c4:df:90:ce:bb:bc:89:eb:cf:a7:ce:d1:e2:
95:e5:0c:05:1d:22:53:6e:a7:ba:d1:35:1a:61:b3:
4e:a5:85:d6:25:a1:b5:37:11:ae:1b:83:19:9a:81:
ce:99:aa:65:19:8f:ae:5e:5d:95:4f:03:a4:c8:3f:
b6:a4:77:f0:19:4e:b1:50:d7:b7:11:0d:ab:a9:c9:
54:f2:5e:05:3d:2f:2b:e9:6d:88:2f:99:29:97:00:
72:6b:6f:74:66:ad:dd:db:a2:9a:c9:c5:6f:c5:16:
93:d9:9c:65:1b:52:8a:5e:83:c1:8f:51:46:53:99:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:C2:32:30:FD:CA:41:5B:63:F1:B2:AF:62:9A:9F:38:6F:76:07
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:93:bd:ec:31:fd:e1:1f:6f:17:7d:78:20:be:cf:a5:4d:
f8:7b:56:93:1f:8e:4f:6c:74:80:0a:f1:3c:c5:17:40:2d:03:
43:ea:9d:70:64:c3:ea:5f:9d:44:8e:63:6e:37:73:54:1f:46:
35:db:8a:56:d8:cf:22:7b:2e:33:2c:bc:cb:64:f0:13:5c:c9:
31:52:3c:84:8c:ae:b9:bf:84:db:9c:25:72:6e:1f:c2:c6:d8:
39:9c:4a:bf:f4:b4:eb:3d:21:75:4e:cc:31:45:a4:8c:5f:8c:
d2:33:90:26:8e:d4:79:2a:1a:bc:f2:e1:d9:41:6a:63:02:e9:
43:57:c0:9c:1e:c2:ce:ff:1f:12:f1:2c:43:3f:07:58:46:95:
61:6d:9e:14:6e:fc:2e:e0:ab:ce:ae:8d:22:5f:fd:e1:30:68:
21:2f:22:ed:d1:21:dd:da:20:ca:a4:8d:a3:69:bf:3f:d6:60:
b5:54:26:62:b5:00:3c:98:a7:94:7a:b7:d7:88:04:3f:f3:e3:
9d:c7:f9:1e:4a:05:e7:4c:e9:f8:f4:88:16:e4:75:3e:f3:f4:
65:57:a8:88:8f:da:a6:2a:e9:b3:7b:5f:7e:1d:33:03:76:69:
69:35:ec:88:a4:2d:a8:34:98:1d:9e:c3:b0:e2:55:25:8e:bd:
91:56:1f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSPs5bU4TCuotgeXRBrYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgxY2QwOTljODViZTcxYTIyMzUwY2IxM2YwNDgyNWMw
MWY4ZjAwHhcNMjUwNDIwMTMwMDEzWhcNMjUwNDIxMTMwMDEzWjAzMTEwLwYDVQQD
Eyg0ZjUwYzIzMjMwZmRjYTQxNWI2M2YxYjJhZjYyOWE5ZjM4NmY3NjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4LaazHt+q6P5dmlM+rZ88wqzkWo
uoKMXsp2M/tP+8qrysiXqTdsPFtMD1piRt5QKabClfWshc7+QlIzx65Y3LlMfOls
PDi09/w430kxO7SOhwC77KlVEBzmFr2KjKZKo4qSYCIORytysA6KTdG4mNJF69NH
ewNP/T/LPh0pAkytNxPAWFBi4MTfkM67vInrz6fO0eKV5QwFHSJTbqe60TUaYbNO
pYXWJaG1NxGuG4MZmoHOmaplGY+uXl2VTwOkyD+2pHfwGU6xUNe3EQ2rqclU8l4F
PS8r6W2IL5kplwBya290Zq3d26KaycVvxRaT2ZxlG1KKXoPBj1FGU5ka7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9QwjIw/cpBW2Pxsq9imp84b3YHMB8GA1UdIwQY
MBaAFFRoHNCZyFvnGiI1DLE/BIJcAfjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wODUwMTMtZGQzZC00Y2E3LWJhNzkt
Yzg4MjgzZjhmMTE3LzEvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wODUwMTMtZGQzZC00Y2E3LWJhNzktYzg4MjgzZjhmMTE3
LzEvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeciTvewx
/eEfbxd9eCC+z6VN+HtWkx+OT2x0gArxPMUXQC0DQ+qdcGTD6l+dRI5jbjdzVB9G
NduKVtjPInsuMyy8y2TwE1zJMVI8hIyuub+E25wlcm4fwsbYOZxKv/S06z0hdU7M
MUWkjF+M0jOQJo7UeSoavPLh2UFqYwLpQ1fAnB7Czv8fEvEsQz8HWEaVYW2eFG78
LuCrzq6NIl/94TBoIS8i7dEh3dogyqSNo2m/P9ZgtVQmYrUAPJinlHq314gEP/Pj
ncf5HkoF50zp+PSIFuR1PvP0ZVeoiI/apirps3tffh0zA3ZpaTXsiKQtqDSYHZ7D
sOJVJY69kVYf/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:08 2025 by rpki-client