Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: wcSXi0qSJyJPhzeskt1kmy0MuwXMxKVJMTiIMuLa/Mg=
Subject key identifier: 36:7C:35:0D:A3:C8:67:60:26:D5:8A:A4:4D:AB:9A:10:8D:A5:1C:0A
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 0196A0897779F960DDF7D844C945051017AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0120
Signing time: Mon 05 May 2025 13:01:25 +0000
Manifest this update: Mon 05 May 2025 13:01:25 +0000
Manifest next update: Tue 06 May 2025 13:01:25 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: dHFB+NYBFaiLDIf+EKK0Jc4SmunJ3Z8mYyyIBggT+TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:77:79:f9:60:dd:f7:d8:44:c9:45:05:10:17:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: May 5 13:01:25 2025 GMT
Not After : May 6 13:01:25 2025 GMT
Subject: CN=367c350da3c8676026d58aa44dab9a108da51c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:88:a5:2c:0b:fa:04:b6:a6:0b:c7:b1:ef:
89:79:8d:e0:4a:3b:da:f5:b6:bd:e7:ab:a1:6b:f6:
e0:fc:1e:88:e2:0e:fb:a7:08:c9:4e:25:dd:cc:89:
4d:a0:e3:a1:d4:14:38:64:06:ba:0c:20:bb:de:99:
42:85:1d:17:f5:af:e8:7c:b3:e3:83:47:34:10:9a:
ef:3d:d1:fc:4a:3b:90:c5:1b:47:f2:d3:18:e6:b4:
a4:c8:1c:d4:bf:f8:d6:1f:45:3d:f4:cd:d4:69:ed:
63:49:63:42:c5:a1:8c:4d:28:fd:07:ac:5b:6a:c8:
5d:0f:ac:b1:0e:dd:df:16:5f:08:59:b7:e8:15:af:
3b:77:22:5a:bc:d7:ca:5a:db:4e:88:c2:2e:1d:e4:
37:cf:88:93:b0:7b:aa:99:b4:5e:09:ab:d1:f3:ae:
96:95:97:0d:59:f8:82:74:60:68:18:f4:bd:14:a0:
c5:e0:1c:e1:26:03:0c:c7:0b:d8:3c:de:4c:c6:02:
0a:83:ca:b7:0a:79:11:70:30:7f:a9:83:f5:5f:94:
88:61:44:dd:47:29:82:04:d8:39:bc:be:f3:e3:95:
89:14:8e:45:9f:c4:05:61:74:fd:4d:ae:cb:f0:4a:
2e:02:2b:4c:39:1b:d4:ff:46:43:c6:6e:34:31:90:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:35:0D:A3:C8:67:60:26:D5:8A:A4:4D:AB:9A:10:8D:A5:1C:0A
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:f5:6c:9a:42:0e:84:8e:44:fd:9b:1d:91:cc:8c:e5:8e:
59:35:78:3c:47:e4:66:30:e1:32:81:29:0b:0f:6e:6e:4f:8d:
31:01:37:92:84:20:bc:21:13:d5:35:cd:8f:a0:1c:37:36:23:
1e:ed:07:11:8c:f4:57:7a:3f:27:5a:2e:de:b0:6a:e5:d0:c1:
72:0e:2a:c1:63:75:c7:e6:d5:67:09:07:4a:25:22:08:84:91:
74:17:7e:71:f1:d7:7c:d6:ef:d4:6f:9f:4d:f4:4e:2f:a0:34:
5f:c6:5a:0f:4c:aa:2c:e0:73:c2:f7:16:55:57:0d:d8:17:64:
a9:c1:85:87:1c:a9:d3:42:c8:bf:52:ae:fb:1f:aa:5b:83:ef:
1d:01:da:f4:b9:4f:f4:9d:6b:c2:f4:67:2e:fe:a3:de:a0:d4:
f2:bc:4d:3e:1a:db:9c:fb:d0:c7:17:3f:6e:e8:7f:15:cb:c0:
82:f2:8e:13:b8:da:b7:63:ba:ce:59:b4:0c:26:60:60:48:d2:
5a:cb:72:d7:ef:a7:43:33:f0:2b:ed:5d:cd:4a:8e:a6:e1:ad:
f9:0e:82:2b:4c:5b:d6:32:68:ca:7c:32:38:60:9f:64:a7:c4:
d8:82:8d:b1:99:57:40:7e:6a:b6:2f:f0:48:d2:a2:ac:e8:5f:
2f:58:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:19 2025 by rpki-client