Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: /yb4sa6yiKbyatiNythdNP6m9BIXqHTvwwMn4FCLyKI=
Subject key identifier: 0A:FE:3C:FC:FD:D7:01:45:42:AF:0C:93:7E:6F:60:AD:C7:30:F9:BE
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019642FA63B7A1E4A297755390398B9FD71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 0350
Signing time: Thu 17 Apr 2025 09:00:27 +0000
Manifest this update: Thu 17 Apr 2025 09:00:27 +0000
Manifest next update: Fri 18 Apr 2025 09:00:27 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: Uf2UOfFs2MsCHBca6eN+I6TE+RFaY2UAghMV1H17HiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:63:b7:a1:e4:a2:97:75:53:90:39:8b:9f:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Apr 17 09:00:27 2025 GMT
Not After : Apr 18 09:00:27 2025 GMT
Subject: CN=0afe3cfcfdd7014542af0c937e6f60adc730f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:36:98:e1:ae:28:d3:78:33:37:8c:5c:fb:
3b:eb:1e:f6:24:25:d2:49:33:f4:b1:bf:1a:05:01:
49:66:35:ca:6b:5a:51:3c:a9:43:da:8f:21:ea:38:
65:9f:db:1c:86:b9:91:1c:8e:c8:71:3a:23:0a:39:
63:30:65:0c:6f:cf:0a:1d:18:03:ab:f6:c3:20:56:
5a:0f:5b:c5:d1:08:ae:b3:5c:4d:65:f0:31:29:8d:
b2:be:75:9e:da:01:8b:75:9b:c8:8f:58:a2:f4:51:
bb:7f:82:48:98:bc:42:7d:ce:b7:4d:37:72:d3:2b:
0d:23:ab:10:6f:5b:c2:6a:78:1e:19:41:9e:92:1c:
54:f6:fb:57:3d:c2:67:a4:60:17:8e:d6:ca:85:00:
0e:51:b5:db:2e:45:8d:8e:ee:5a:e0:2a:88:4a:0e:
03:ee:d7:8f:37:5b:f0:ba:7e:4d:b4:6e:f0:c9:03:
b6:07:4b:82:08:5b:4c:62:8f:1e:a1:72:1e:f6:56:
2d:59:4e:9c:c0:82:d4:53:12:0a:d4:90:c7:be:d7:
95:57:6d:d2:d6:dd:b6:9d:66:5d:41:24:33:a9:c3:
ce:7f:c2:9e:2e:4f:e4:45:4f:a7:90:94:c7:05:7d:
31:80:80:ef:c3:a8:3e:e9:dd:5e:af:3b:7a:5b:1b:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FE:3C:FC:FD:D7:01:45:42:AF:0C:93:7E:6F:60:AD:C7:30:F9:BE
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:c9:85:97:52:27:47:13:3e:60:d3:93:61:64:29:3d:31:
af:44:7b:f6:37:25:e5:bc:31:24:8e:07:a0:fb:34:62:fb:36:
12:bd:cf:fa:80:aa:e9:d3:94:f5:55:25:76:13:f1:7f:42:9b:
74:31:4e:8c:ed:41:76:04:46:ad:ef:f4:c1:04:75:a0:7f:05:
a2:66:17:ad:b5:7a:88:98:25:fc:17:79:ba:ef:5d:55:03:46:
5c:3e:a0:d8:3a:e5:6f:79:ab:60:48:c3:19:29:c3:02:08:db:
21:a4:7e:89:0d:14:dc:f2:80:3a:b3:05:e0:18:79:52:6a:80:
22:dd:cf:2c:a7:af:a0:90:e9:4b:cf:6c:83:e5:d1:8c:f4:05:
bd:b7:d4:a7:9c:85:a1:18:d2:b4:cb:3b:be:a6:a3:4a:30:19:
f2:47:bd:cf:3f:2e:19:25:de:4b:c0:85:7d:aa:bf:0a:dd:01:
1b:5d:75:c4:83:9d:77:7d:ce:f3:48:db:9d:a0:81:48:02:6c:
32:a9:da:a4:15:1b:66:8c:db:56:67:9e:4c:76:28:53:0a:18:
c4:c1:1d:ac:1e:91:79:53:a1:b5:d1:37:db:e4:4b:1f:bf:cd:
e5:72:55:23:ed:b0:38:b6:a3:8e:04:e4:dd:cb:42:c6:9e:0a:
59:35:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:01:29 2025 by rpki-client