
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: zb81bLxevRVmihwmPTr0HcNV8ZzNGwjhyrss0WQs6B8=
Subject key identifier: F2:3F:50:D8:3C:DD:17:1A:A5:3A:49:5E:FA:C5:A2:8F:D6:72:3C:3C
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 0196A654BAE79BDA759254E2537C49C99E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 0488
Signing time: Tue 06 May 2025 16:01:32 +0000
Manifest this update: Tue 06 May 2025 16:01:32 +0000
Manifest next update: Wed 07 May 2025 16:01:32 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: +HUk4j2BmaX3HTN/tIQIworESPkuOly5LrWF0L5q1WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:ba:e7:9b:da:75:92:54:e2:53:7c:49:c9:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: May 6 16:01:32 2025 GMT
Not After : May 7 16:01:32 2025 GMT
Subject: CN=f23f50d83cdd171aa53a495efac5a28fd6723c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:4f:a5:c2:9e:90:52:a7:ad:d9:91:c9:f7:
aa:82:4c:96:3c:75:34:97:3e:19:a4:a0:08:22:7c:
e1:d2:b4:2c:99:67:43:55:21:ff:de:52:b2:cf:6d:
b8:64:3d:81:e6:ac:3c:dd:65:d2:44:92:e2:e4:30:
74:11:d3:70:d3:77:0a:0e:0c:86:db:70:3d:f2:7e:
69:d6:03:32:2c:69:83:76:4c:34:bf:2a:3a:d8:55:
18:f9:40:b4:ef:10:c5:e2:47:da:1e:66:37:b7:aa:
0c:81:e2:8c:42:9f:86:5e:64:fc:2f:c8:4e:ad:fb:
c0:a8:e0:b0:bf:59:91:a4:78:ef:32:fe:95:5a:22:
f7:c3:b5:22:dc:85:8e:af:62:25:df:29:ae:e0:85:
3b:94:0b:6a:6a:63:a2:a6:2f:b6:35:b6:82:06:fe:
3c:8b:b9:7b:c3:e3:e8:27:6b:08:5f:2e:ad:13:1e:
de:42:a0:5c:ec:5f:8e:08:a1:c5:27:b6:14:c0:ad:
f8:81:99:fb:19:4c:fa:e5:33:3e:5a:28:f4:01:00:
90:80:54:91:71:a5:65:d7:eb:e3:c8:3d:54:5f:73:
3a:9c:e5:83:34:27:7d:5f:36:5b:d3:88:5f:27:48:
06:79:89:05:73:79:1d:74:38:98:6b:b0:a0:09:b6:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:50:D8:3C:DD:17:1A:A5:3A:49:5E:FA:C5:A2:8F:D6:72:3C:3C
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:aa:07:8a:1b:e7:13:40:c5:9c:ab:b0:59:b4:2f:92:bd:76:
3b:e7:c9:17:f3:09:80:49:06:1a:15:27:b9:79:23:1c:a6:70:
0b:47:26:34:f5:b9:e9:19:b6:70:34:42:d4:2a:7e:96:f1:f0:
76:df:fb:52:a9:15:ab:14:9e:82:be:e9:a0:ce:96:ea:c1:fe:
09:ab:36:aa:86:4f:9b:0f:e9:bf:ea:fe:b5:1c:7e:f2:93:8c:
81:7b:c8:2e:b6:77:68:86:bd:09:c8:3c:9e:6a:ca:68:88:37:
53:c3:37:a0:6d:cf:78:07:b8:43:a4:e9:98:c8:d7:ed:fe:5a:
75:18:54:56:55:f4:a2:9a:67:e1:39:2d:58:e8:c6:d1:73:85:
0e:c5:89:f5:c2:80:21:9b:fd:50:c6:dc:1f:c3:66:b4:20:70:
37:c7:71:48:fe:23:66:de:3c:f8:a7:02:49:29:56:1a:74:bf:
2f:7b:31:54:bf:49:31:22:df:12:27:9a:a3:e0:cd:80:22:69:
f6:22:21:29:3a:3f:50:33:0b:ab:7c:b3:8e:04:d3:57:4d:18:
b0:66:52:4e:32:22:03:20:42:71:d3:15:3a:45:2e:d7:c2:72:
05:2a:d5:93:00:ad:f9:b4:92:11:27:e6:90:f6:f1:8a:17:f5:
ef:11:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:25:36 2025 by rpki-client