Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: qVRx/uwSkTpkXiGEHDOJN09K5LGODxBWFBCqBkJgluU=
Subject key identifier: F3:E0:E1:BA:9E:9D:17:4C:78:71:C3:5C:FA:94:2D:28:AF:B6:9F:D9
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 01969E9ABF152A1DA0DAC0E4AED083A6A8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 151F
Signing time: Mon 05 May 2025 04:01:03 +0000
Manifest this update: Mon 05 May 2025 04:01:03 +0000
Manifest next update: Tue 06 May 2025 04:01:03 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: K16sriTyGx/CEeDOyT5u2+qY2ohhyjj42e/ynWMldbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:bf:15:2a:1d:a0:da:c0:e4:ae:d0:83:a6:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: May 5 04:01:03 2025 GMT
Not After : May 6 04:01:03 2025 GMT
Subject: CN=f3e0e1ba9e9d174c7871c35cfa942d28afb69fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:79:bb:55:03:40:20:60:ca:ed:3e:11:6d:
4b:fb:4f:72:ad:83:81:89:81:60:0d:86:2f:ad:b7:
c3:76:12:e9:53:33:74:c3:44:bf:04:31:de:c7:04:
26:5b:94:1a:13:84:05:73:de:2a:30:1e:b0:94:4c:
c8:53:10:6a:39:20:fc:28:a3:69:b2:71:93:f3:6c:
df:75:3a:66:13:52:51:ec:37:c5:55:48:2b:9e:82:
bf:77:5c:e4:f7:31:e9:e3:45:12:6c:e9:d7:5b:d8:
02:0b:d3:83:08:ae:df:6c:1d:ad:91:57:0f:57:e1:
de:ec:68:e4:2f:6e:d3:ce:64:a9:a0:41:36:b8:b2:
e5:67:d8:c7:3e:a4:9a:a3:e6:14:13:b4:74:bd:84:
cd:9d:a6:6b:d6:c3:ca:dd:6d:13:c2:18:01:69:04:
85:5c:52:c9:2c:ca:fb:1d:1f:32:4b:46:d4:be:6f:
5e:32:51:dc:0b:ea:6c:b9:bc:6f:ea:13:75:8f:33:
64:94:1d:eb:3a:94:19:14:4f:fe:fa:37:1f:66:d8:
aa:8a:d7:4e:75:1e:10:ba:27:e8:18:a8:e0:8c:76:
69:ab:d9:88:82:9f:2c:2c:de:f6:a0:1e:0c:58:21:
f5:5a:71:41:d8:65:47:1b:3f:97:a4:63:00:c9:36:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:E1:BA:9E:9D:17:4C:78:71:C3:5C:FA:94:2D:28:AF:B6:9F:D9
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:d0:0d:88:2e:24:ee:d5:5c:54:d8:de:a2:18:74:06:c3:
0b:6f:aa:b8:38:04:4f:0e:8a:7a:5b:02:79:25:37:4f:8e:b4:
b3:24:d4:e6:8f:af:79:71:4c:9a:56:ef:4f:b1:0e:f4:c4:0c:
89:7a:24:9f:22:7a:c4:b2:07:65:78:01:93:7b:2c:85:e9:a0:
6d:6e:43:80:a7:02:f4:3a:d0:b4:79:c8:d0:ff:f7:fb:15:7d:
fd:0c:59:92:f5:40:12:a0:de:dc:a8:10:d6:7c:ef:4a:d6:62:
5b:7b:93:88:11:d1:94:b2:3e:fd:32:92:53:af:da:e1:56:3c:
2c:8b:f4:99:a1:83:5d:ac:cf:02:27:0d:f4:61:af:ab:c8:e5:
86:63:3f:99:12:da:d3:89:2f:4d:47:7e:14:2f:74:7e:e9:6d:
cd:08:76:f2:39:73:6d:32:30:e3:93:e4:37:d4:8e:e4:ba:56:
eb:d0:e3:71:9d:d4:24:17:eb:1b:7a:4e:2c:c3:3f:f8:1b:bd:
70:59:a2:2d:1d:e4:b0:71:ce:7d:97:3f:67:ab:98:77:6f:19:
20:34:34:b5:ae:44:b0:f9:58:6f:48:83:fd:45:8b:02:5b:54:
88:f1:37:6e:a9:db:8f:19:38:ea:90:83:a2:a0:e2:ed:e4:e1:
86:3b:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:50 2025 by rpki-client