Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File: VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier: XyWA6MkYkeR6GfqH0cJzNGGmUfKK2J4cuPIawyTRlG4=
Subject key identifier: FB:3A:4F:AA:01:99:2B:91:85:8E:D3:DE:24:5D:A1:EB:2B:98:B3:58
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer: /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial: 019655A5902406924363A205E934E4484D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number: 036A
Signing time: Mon 21 Apr 2025 00:00:35 +0000
Manifest this update: Mon 21 Apr 2025 00:00:35 +0000
Manifest next update: Tue 22 Apr 2025 00:00:35 +0000
Files and hashes: 1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: OKt/noLqIsdV1rRSyOA/h5rPwj6zHDW9hF/aN3/iaaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:90:24:06:92:43:63:a2:05:e9:34:e4:48:4d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Validity
Not Before: Apr 21 00:00:35 2025 GMT
Not After : Apr 22 00:00:35 2025 GMT
Subject: CN=fb3a4faa01992b91858ed3de245da1eb2b98b358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:7f:fb:72:c9:b3:d8:f5:26:d9:73:5e:d8:
4c:82:3a:af:35:87:20:5e:c0:b9:7a:55:dd:53:26:
ce:6f:d5:a0:16:f3:08:e4:3e:db:27:04:07:69:5f:
1d:de:6f:31:7f:cf:95:cf:58:7c:96:c7:a4:23:f0:
a9:9d:73:65:60:a7:23:89:78:ab:78:8a:0a:18:13:
4e:1e:fd:4b:9a:cd:0e:f9:05:31:c6:c8:29:bb:2f:
a6:ac:93:f4:f6:9a:2b:2a:6a:4a:82:1d:1f:b3:7f:
c0:5a:51:9b:60:e8:b4:8d:c6:45:99:61:6e:b4:64:
0f:e3:2a:d1:f3:4b:27:6a:f6:7e:11:ec:f0:64:4e:
43:dc:87:93:00:4d:62:8d:40:32:84:25:41:8d:04:
e1:4e:a9:79:67:33:c8:a0:6c:e1:fa:b9:a2:f8:fd:
c1:0f:5a:d8:f1:da:0f:bc:4c:80:f8:7b:79:f8:30:
97:fb:25:a6:c5:be:6a:23:09:4c:81:37:dc:04:ce:
28:88:89:f5:19:b3:e2:9a:12:65:a7:11:22:17:44:
44:27:fe:9a:7d:cb:8e:4c:49:45:c1:f6:f3:22:ab:
c0:c1:9b:90:0f:c6:c1:78:aa:54:fa:5d:df:88:7a:
1d:16:80:8a:72:83:e4:5b:99:43:31:cc:72:ce:3d:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:4F:AA:01:99:2B:91:85:8E:D3:DE:24:5D:A1:EB:2B:98:B3:58
X509v3 Authority Key Identifier:
keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:b0:29:90:58:91:98:ed:f9:1e:38:64:d6:bc:60:03:d3:
ac:24:1f:e2:c6:28:e0:70:eb:76:fe:8c:5f:a4:5a:70:2c:94:
2a:1b:fa:6f:3b:d7:1e:f0:8f:5c:ab:f4:6c:e5:08:dc:ad:7e:
1b:5e:e7:00:09:31:48:ea:33:a7:91:a9:02:77:cc:f4:58:30:
91:d3:86:13:4f:be:89:90:d5:5a:61:98:ab:36:91:c5:42:7f:
42:f6:a0:a9:cb:9f:fb:50:03:6d:3c:54:73:5a:d1:f5:dc:24:
9e:a5:9c:18:29:d7:5d:34:2d:e6:d2:c3:17:b2:53:48:a2:88:
ae:fb:3a:6a:23:07:b1:33:aa:73:22:54:ce:26:44:0a:2d:97:
3b:ae:8c:60:b1:b9:f7:71:62:ed:e9:20:c4:54:42:b1:f4:7f:
65:ac:4c:9e:bb:ab:cf:ba:52:2d:08:03:a7:73:f2:2f:5c:15:
bf:45:e9:07:e1:1f:a2:51:8a:e6:da:4c:28:57:83:53:d9:1b:
60:09:d4:e2:e2:70:a3:d0:a2:b9:2e:21:db:50:5c:b6:09:e3:
b4:0d:de:8d:ab:27:b4:bd:80:50:9a:a2:32:ef:59:2a:7a:7d:
39:0d:b4:1b:7d:be:2b:a1:7d:a0:f1:88:87:56:f7:35:dd:6d:
ed:a3:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:15:02 2025 by rpki-client