Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: DHz0DmuzycwaDerTzpHl/nmQOy/hI5W1M8EIv7rnR7I=
Subject key identifier: 8B:7F:87:36:0F:C0:D2:95:F6:68:D8:E3:1B:1C:65:2A:0E:2C:82:DE
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 0196504807EF03C31FBB5628F3D144296850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 0527
Signing time: Sat 19 Apr 2025 23:00:19 +0000
Manifest this update: Sat 19 Apr 2025 23:00:19 +0000
Manifest next update: Sun 20 Apr 2025 23:00:19 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: ct+5uUWGHKodtqzloPkf7Kkta8cA9DFP2MftyjK/45I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:07:ef:03:c3:1f:bb:56:28:f3:d1:44:29:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Apr 19 23:00:19 2025 GMT
Not After : Apr 20 23:00:19 2025 GMT
Subject: CN=8b7f87360fc0d295f668d8e31b1c652a0e2c82de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:01:9d:54:b0:6a:c2:a4:ff:67:65:44:93:
89:6c:a1:b8:a9:48:ac:77:5d:e2:a9:19:53:cd:66:
92:82:f6:97:d7:af:14:a9:2c:f5:52:5d:51:32:d0:
7e:39:1b:dd:c9:c8:6f:65:9f:54:f6:84:87:79:f7:
56:a7:f6:e2:15:dd:d4:a2:78:fd:87:e9:5b:b5:8c:
9c:44:67:d4:a0:0f:29:2d:2b:02:03:a3:d0:0b:85:
de:67:08:60:41:6d:be:5d:23:49:bd:66:9e:e9:55:
10:a8:56:5a:0c:68:66:68:c8:85:ac:a0:f4:be:f3:
e0:37:17:81:7d:ad:38:a7:29:db:06:49:af:07:a0:
50:ed:ad:38:b7:97:24:4c:0d:96:9e:9b:be:07:10:
e1:45:42:a2:ed:9a:35:0c:6e:c5:05:8d:be:ee:bf:
b7:09:a2:72:eb:5f:db:d7:1b:5c:10:3f:a1:d1:44:
ba:79:f7:61:e9:4d:43:2b:b1:7b:78:9b:ab:0a:8e:
5f:04:08:57:50:d6:92:f5:8a:b5:5b:fc:94:7e:aa:
14:3a:7b:3e:0c:46:5c:81:39:15:04:77:39:21:94:
c1:0f:29:f3:50:9d:b7:c9:5a:4e:4e:c3:0e:dd:2f:
35:93:ef:73:69:f1:15:f0:31:dc:25:0c:71:14:e6:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:87:36:0F:C0:D2:95:F6:68:D8:E3:1B:1C:65:2A:0E:2C:82:DE
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cc:88:42:4c:5c:3a:81:0c:fd:df:6e:63:5f:b8:d4:06:bc:
7d:57:af:b0:48:0d:3c:d4:e6:01:3f:81:a8:1f:c2:8d:4d:10:
8c:8d:ce:de:74:bc:54:71:7b:f7:e4:67:84:1e:ce:92:b1:9b:
04:a6:b0:36:a0:36:bb:3d:85:b2:ac:35:8d:73:a9:5c:d2:ba:
ee:d0:c0:7a:57:93:c7:d2:42:d5:1b:1a:fb:ab:67:a0:06:85:
eb:4b:45:e4:46:f7:a0:3c:84:67:2d:44:af:e7:a2:c1:73:07:
91:3d:49:54:4f:04:e6:02:c5:29:9b:bb:fb:52:00:63:54:34:
7a:bc:4c:01:9c:b4:24:38:26:2e:38:a0:c3:ab:01:d3:f5:9d:
5e:57:6f:bb:b4:34:d3:90:15:cc:3d:de:5f:d7:1c:cd:da:86:
92:e8:1c:2e:02:4a:01:c2:78:c3:2f:60:f5:5c:b7:3f:ff:8c:
53:e4:97:55:0d:e2:27:e5:cc:d2:49:99:45:04:cd:7e:9b:06:
57:81:43:53:cb:0c:09:7e:02:cb:6d:97:90:3f:40:92:f8:33:
65:30:d1:c7:22:83:5e:7e:ad:76:12:b8:58:57:19:af:b0:1d:
9c:60:9c:c3:7d:3c:64:28:1a:e6:5b:1c:63:b6:30:72:db:6d:
ad:38:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:33 2025 by rpki-client