Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
File: VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft (raw, json)
Hash identifier: WHI1lIEtWIbc1Q1a5w+Y4v9C8PLR3RNReRi18rkDTVM=
Subject key identifier: AC:87:3C:D1:38:EF:3A:A7:70:8A:CD:31:FF:33:1E:13:B8:BF:32:F3
Authority key identifier: 56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C
Certificate issuer: /CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
Certificate serial: 0196C6835942223263336BF09356CC68B124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
Manifest number: 1475
Signing time: Mon 12 May 2025 22:00:18 +0000
Manifest this update: Mon 12 May 2025 22:00:18 +0000
Manifest next update: Tue 13 May 2025 22:00:18 +0000
Files and hashes: 1: VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl (hash: kvuffZpyVYHm/D8NH0kY/DN2FijAdVTi1Fw/UkXaYgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:59:42:22:32:63:33:6b:f0:93:56:cc:68:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
Validity
Not Before: May 12 22:00:18 2025 GMT
Not After : May 13 22:00:18 2025 GMT
Subject: CN=ac873cd138ef3aa7708acd31ff331e13b8bf32f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:d2:5e:74:65:71:7c:9f:4b:46:3d:cd:97:
cd:1b:c7:fe:58:83:e3:d2:c8:e0:46:62:1e:82:e7:
b4:52:6b:9c:1e:92:6e:72:68:3a:b7:db:87:59:30:
94:30:62:76:0c:3b:04:f7:4c:13:b8:27:4e:d7:7d:
a5:17:b2:94:4a:97:93:e3:cc:c5:40:dd:1e:80:42:
83:9c:fe:c8:e2:35:25:8f:89:a8:0f:1d:8c:32:7c:
2a:4f:75:1e:93:4a:04:85:ee:94:1d:42:11:6e:cf:
23:3a:aa:a3:9f:7a:f8:70:a1:a8:34:8b:8c:5b:86:
e4:63:9d:d7:fa:25:33:90:8c:b7:99:e8:b8:e8:b0:
a7:aa:8d:58:f6:19:e3:b2:49:70:d6:99:57:69:d6:
0f:fb:c5:f7:90:d0:9e:7d:da:33:1e:4f:74:93:f3:
5d:a5:24:74:54:1c:71:46:5c:34:22:d1:f5:2c:0b:
14:bf:23:7e:14:5e:c7:07:cb:f5:78:42:b1:65:00:
66:78:64:29:34:2c:30:18:0a:0a:94:e2:43:7e:98:
d4:d7:de:05:71:c9:6f:9b:38:38:be:2e:68:e7:c9:
a0:dd:0e:2d:57:3e:32:cd:3c:6a:87:75:50:dc:44:
9a:a7:0f:8a:b9:dc:b9:b3:05:05:67:75:3f:ae:05:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:3C:D1:38:EF:3A:A7:70:8A:CD:31:FF:33:1E:13:B8:BF:32:F3
X509v3 Authority Key Identifier:
keyid:56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2c:39:7d:29:76:99:7d:53:4d:6a:09:9a:db:5e:72:0c:f0:
9f:74:bb:90:a5:f2:1a:74:78:2e:6b:d4:96:b0:78:ad:9e:fd:
0c:d9:04:ef:e8:73:4c:fe:8b:f4:ed:ff:6d:9e:08:67:ce:59:
bc:0d:98:9d:b3:b7:bd:cd:63:cd:e2:b1:c4:3a:eb:42:37:fa:
29:c4:23:c3:45:d2:f7:30:77:49:2e:69:f0:c3:7d:85:ad:1b:
f1:e1:45:a0:50:a2:bf:a8:f9:fa:51:47:ed:4a:00:96:b3:3f:
e6:6b:f1:53:3b:57:bf:5f:82:67:02:ed:a6:91:61:25:1e:b9:
38:1b:3e:53:f3:db:ee:5e:04:42:d9:4d:fc:ff:d9:b0:06:17:
4c:0f:58:1a:c7:32:d2:a1:a4:8f:e8:3a:8d:fc:fd:21:77:70:
e6:fb:34:92:20:0d:b5:cb:88:44:51:2e:5d:09:fe:68:de:02:
5d:a7:d1:f7:f1:9c:cd:0c:9f:56:1b:ba:8a:f6:d1:9b:68:58:
a8:6a:4b:d9:cd:85:1e:1f:39:0b:08:3c:fa:19:8c:c8:c9:0a:
15:2e:bc:6d:0e:24:74:b1:10:e0:a9:da:85:4d:5f:94:3a:21:
43:12:ef:9d:be:0c:f0:b7:c3:ea:ef:39:b4:36:53:c2:04:bb:
a4:17:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:34:42 2025 by rpki-client