Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 6EXKbigKMB6qan0bHa/35FTbyfpDITmqK53N4iZA39Q=
Subject key identifier: E1:B2:BB:F5:6C:0E:8D:11:A7:79:88:69:25:DB:75:1B:99:E8:2E:6D
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0196C34C71FE31F4BF11D0D6BCD4B9175F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1207
Signing time: Mon 12 May 2025 07:01:29 +0000
Manifest this update: Mon 12 May 2025 07:01:29 +0000
Manifest next update: Tue 13 May 2025 07:01:29 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: 14rLx19bb6xWqA72hwUXIRT0kylUMFRNDOWpZHFE6Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:71:fe:31:f4:bf:11:d0:d6:bc:d4:b9:17:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: May 12 07:01:29 2025 GMT
Not After : May 13 07:01:29 2025 GMT
Subject: CN=e1b2bbf56c0e8d11a779886925db751b99e82e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:be:e7:ea:55:00:b5:c1:58:3c:53:d8:e6:
79:c2:43:82:8f:23:b5:a8:7b:be:07:df:d6:58:8f:
31:11:17:88:a7:f0:04:18:4c:3e:19:26:60:00:2d:
46:b5:ad:12:df:e0:01:23:4a:4b:c1:f3:a9:84:3d:
32:0d:be:04:45:9e:69:29:e2:86:50:be:e3:84:42:
f1:9e:93:c8:91:dc:5b:8d:79:e3:f4:da:df:9d:8a:
89:73:26:05:8b:8a:1e:d6:27:be:ad:22:13:bb:92:
c6:35:b4:aa:b2:53:03:d8:50:b2:7d:0c:cf:b3:20:
81:7f:16:6f:d1:2f:dc:4f:76:8a:de:f8:9a:45:2f:
d5:df:ed:82:95:aa:13:6a:7a:bb:71:8a:b9:28:6d:
73:e3:eb:f6:0d:71:26:23:01:03:ba:63:7e:89:ab:
f7:34:d6:13:72:42:2b:98:54:39:76:8b:c6:ec:38:
3b:9e:29:1b:e0:01:da:b1:26:fe:24:8c:a9:d6:9d:
ca:5a:a0:17:ba:ba:29:ba:24:2b:eb:6c:bc:b3:b7:
1a:0d:f4:9a:8d:b6:8b:50:72:2f:92:0a:53:17:cc:
a7:ab:9c:25:29:d3:49:06:ec:29:ed:d8:1a:5a:9e:
55:63:d4:22:c6:bd:f3:fb:ee:56:5b:1f:a7:5b:cd:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:BB:F5:6C:0E:8D:11:A7:79:88:69:25:DB:75:1B:99:E8:2E:6D
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:7d:bc:44:87:fd:5b:b4:10:bf:96:bd:86:12:00:cd:32:
41:7d:84:5e:62:81:4a:bd:30:a8:0a:48:c2:9f:78:bf:73:f4:
f7:14:13:fd:c9:17:c8:1f:ab:4d:c9:b3:52:77:09:d5:46:4c:
d1:09:79:e0:0f:d0:4b:0f:0f:ea:1a:c4:cf:37:5f:6d:8c:89:
a3:45:9f:f4:18:08:2b:76:9b:73:05:bd:73:e2:f4:58:9e:b1:
9b:a2:26:a4:a6:7f:85:fe:c3:cd:83:c8:63:6f:06:2e:c0:2f:
5f:f4:c2:ac:8d:3f:4a:af:99:be:9e:96:79:e2:78:2f:7e:71:
9c:a4:e4:14:f8:c7:ea:27:b2:28:b4:9a:83:c6:2e:6b:7c:da:
d7:83:df:f1:75:72:3c:2b:89:58:11:af:9e:8f:e3:89:e4:5c:
ae:44:96:0d:57:54:d6:0b:ea:bb:de:9c:d9:df:ab:46:ca:3e:
bc:7e:fe:fc:82:cf:f7:9d:34:e9:3d:12:40:16:d8:cc:7e:0c:
c7:12:e8:2e:57:07:f7:9e:bd:9d:6f:85:c4:31:31:09:ae:74:
39:e6:6f:44:8b:fe:4a:f3:fb:65:09:cd:22:0a:5e:e6:24:ab:
ce:79:26:39:88:e0:63:55:0b:c2:94:9c:5c:93:10:04:21:b1:
25:00:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:44 2025 by rpki-client