Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: rJFK9IhOaRS5YyRPR/ysNGUav8rFPGwPohFnYbUE6i4=
Subject key identifier: 86:D4:F0:BD:E5:61:85:8C:CA:A1:FF:74:A2:12:D2:CA:7B:33:71:1C
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 0196BC6DCE51060838810C7D5A41BB08E6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 1334
Signing time: Sat 10 May 2025 23:00:34 +0000
Manifest this update: Sat 10 May 2025 23:00:34 +0000
Manifest next update: Sun 11 May 2025 23:00:34 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: S7BQjypcCwrzUtsAGCeUCCHRPsT7bzbG+cwDi3TIKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ce:51:06:08:38:81:0c:7d:5a:41:bb:08:e6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: May 10 23:00:34 2025 GMT
Not After : May 11 23:00:34 2025 GMT
Subject: CN=86d4f0bde561858ccaa1ff74a212d2ca7b33711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:d4:1e:a2:05:08:bc:8b:0f:30:13:da:9b:
3e:70:2a:f0:9d:66:ea:20:59:1c:a5:fc:de:21:35:
59:40:01:ae:2d:56:57:07:35:53:27:33:ae:a1:2a:
b5:8e:76:b9:d8:3c:9d:a0:7e:31:5e:e5:8a:4b:12:
3a:f9:32:f2:bd:b3:af:74:a2:37:b2:84:0a:01:d5:
10:15:55:92:bf:3e:1e:db:7a:98:c9:a1:76:fd:ee:
9c:f3:8e:19:ac:54:42:d7:c2:c3:f3:88:eb:64:29:
7c:6c:ec:33:d8:de:70:fa:b7:99:a5:7c:aa:75:e3:
bf:34:c8:ca:b6:71:ec:22:b6:b6:94:1c:c2:72:f0:
1c:82:d3:f7:cb:32:b8:5b:aa:4c:d8:19:fc:de:d2:
3f:4f:c1:fb:a0:b8:a0:c3:de:aa:fc:7d:44:cf:98:
1b:9a:58:ec:a1:d7:29:e1:03:d2:fd:63:fa:34:e9:
66:a1:ed:b9:9b:db:a1:08:ba:e8:50:ab:c9:4e:c5:
59:f8:e6:46:c9:96:d3:9b:80:ac:f2:ca:c9:18:df:
51:65:97:60:db:1c:8c:ea:df:f5:38:48:29:6a:df:
84:ad:77:09:c9:69:7a:85:45:d6:8b:ba:c3:75:f0:
e9:3e:e2:f4:9e:57:16:7d:ff:7a:c8:0a:f7:7e:d9:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:F0:BD:E5:61:85:8C:CA:A1:FF:74:A2:12:D2:CA:7B:33:71:1C
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a8:e4:88:eb:ee:4b:27:52:1e:a6:96:5d:9b:09:3a:27:f8:
3b:f0:15:0f:b9:22:72:94:da:56:60:dc:7e:e8:3d:70:84:9b:
3a:f0:cf:f1:89:63:1f:21:84:67:4a:91:7d:6f:d5:ce:e2:61:
32:98:ac:66:0c:57:8d:a1:65:6b:f8:19:51:f8:c8:ce:c7:5b:
14:72:62:67:f0:ea:40:6e:e9:88:5f:55:fd:28:37:a6:41:d6:
03:6d:62:a4:2a:37:03:09:d1:f1:89:37:2d:80:03:5a:27:ba:
0a:80:52:5f:8c:f4:2a:24:49:1b:d6:5e:2c:66:82:bc:41:2d:
12:83:75:fe:a5:2e:df:9c:c4:5a:9c:64:01:64:1d:1c:00:8b:
3c:eb:a1:b4:88:a5:fc:96:41:4f:bf:bf:e7:ac:bc:ba:3e:bc:
d8:90:bc:1e:de:22:34:9c:1f:2f:33:b8:63:4b:45:4a:b4:40:
98:68:a3:a8:6a:df:2c:4a:28:71:46:89:14:41:83:6e:f4:9b:
30:c8:f8:3a:50:34:8b:cb:92:42:a4:29:39:81:cd:ca:e8:2b:
96:bd:59:f1:65:bf:cc:a2:91:2a:3e:ba:02:da:a6:4b:44:09:
7a:a5:6e:98:bd:6b:20:92:2f:43:5b:ed:7d:80:89:86:6c:46:
65:33:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:25:05 2025 by rpki-client