Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json)
Hash identifier: 1nc8Rb8cyEfE8eBFIltgT89H2JLRwAtPbq+F+OHy+LY=
Subject key identifier: BD:C3:34:40:EC:21:A5:9F:AA:41:7D:C0:82:27:D7:C8:34:AA:D0:51
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 0196CB3C4E71283428A682096BF78549CB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
Manifest number: 012A
Signing time: Tue 13 May 2025 20:00:49 +0000
Manifest this update: Tue 13 May 2025 20:00:49 +0000
Manifest next update: Wed 14 May 2025 20:00:49 +0000
Files and hashes: 1: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: xHW0DjOeMzstYuLUJQYZfIyOhVRcQtCJvEkDCf7OEpw=)
2: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (hash: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:4e:71:28:34:28:a6:82:09:6b:f7:85:49:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: May 13 20:00:49 2025 GMT
Not After : May 14 20:00:49 2025 GMT
Subject: CN=bdc33440ec21a59faa417dc08227d7c834aad051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:af:f3:b7:16:9e:c6:f5:a0:ec:77:05:63:
72:b9:50:78:4d:77:f8:00:60:f1:bf:5d:d8:a0:60:
0f:72:95:0b:23:eb:1d:37:c2:85:ea:4a:f3:a4:00:
69:09:5f:68:a0:54:5c:b6:60:14:b0:94:35:94:92:
03:f2:c3:e1:65:ac:f7:0d:da:8d:ce:98:9d:1b:a9:
89:fe:c5:4a:57:03:df:b8:46:04:56:0c:8f:d9:c7:
52:89:de:8d:5e:d7:3f:ce:2e:21:2a:86:47:e8:47:
fa:06:fb:99:a1:00:c5:6d:19:0d:59:dc:51:7f:de:
43:a2:05:28:3c:4d:a5:2b:6e:45:9b:71:b8:02:d4:
8d:c9:bb:0d:0e:8f:8c:67:5a:e1:4c:fd:69:e8:13:
d3:70:1c:11:d3:c8:07:85:ca:e8:50:80:5b:24:c5:
d2:f6:1b:dc:be:9a:09:b8:0f:4d:8c:3c:37:13:cf:
36:a9:50:4e:b9:b8:91:3b:74:12:05:bc:9b:57:fe:
05:b6:de:5d:ae:2c:98:e8:88:24:6c:02:cb:e9:33:
00:bc:db:e0:72:e6:de:5b:cf:d2:9e:4e:8b:a3:23:
17:0b:ea:b6:00:41:e1:ef:1d:64:c0:38:d8:25:0b:
36:c7:12:ab:50:e5:63:82:01:ac:c6:ae:3a:23:df:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:34:40:EC:21:A5:9F:AA:41:7D:C0:82:27:D7:C8:34:AA:D0:51
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:31:69:53:a2:f0:1b:68:88:fd:bf:9a:af:11:8e:36:32:
bd:dd:e4:bf:77:27:8b:25:30:1c:e1:a1:ba:4e:4a:ec:a4:dd:
4a:db:eb:c3:98:3b:93:cb:9b:29:1a:2d:6e:b9:97:26:4b:f7:
23:3f:73:66:06:2d:0a:bf:1f:b3:30:a5:c1:91:4f:bf:0e:be:
bf:30:1d:53:be:df:cd:bb:b4:d8:ce:28:59:2a:51:2e:af:f5:
5c:a5:1b:c5:af:af:c3:c9:53:00:bd:29:76:cd:d1:75:0c:87:
aa:49:73:d2:da:39:04:48:8b:45:33:1a:be:e7:a6:6d:ec:c1:
6f:55:51:f3:d2:35:eb:80:ec:1b:7f:d1:fa:0f:7a:01:84:09:
dc:1c:2e:f1:d1:d3:91:db:8a:26:9b:87:ee:86:36:5f:01:eb:
73:45:12:04:00:9d:c9:84:7e:d5:aa:b6:7f:59:6f:0c:62:3c:
63:13:c2:62:dc:ce:45:6e:51:02:10:26:9e:98:27:3e:5c:95:
ba:66:6c:ea:97:ee:f9:cd:d1:0b:bb:ac:f2:4b:21:a1:9b:37:
55:64:e6:78:5e:98:05:08:8d:1a:f3:71:6b:18:62:ef:09:7b:
68:15:89:4e:e9:ef:a6:3a:f9:e8:27:0e:f1:65:ca:94:5c:82:
b4:8f:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:59:45 2025 by rpki-client