Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: hpAkIORYTUQha9lUZPoxWshoDXe+VjbG+kF1rTjhAEM=
Subject key identifier: 0B:2E:07:B4:81:49:9E:49:9D:63:51:6D:BC:BE:8C:89:C2:5D:EA:BC
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 0196C804805A81A04F63B71EB3586B1BE8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0B3A
Signing time: Tue 13 May 2025 05:01:00 +0000
Manifest this update: Tue 13 May 2025 05:01:00 +0000
Manifest next update: Wed 14 May 2025 05:01:00 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: ZNPMFV9vkLb9McYKGFi673TVgpDxxzkYhwuN0FWBVBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:80:5a:81:a0:4f:63:b7:1e:b3:58:6b:1b:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: May 13 05:01:00 2025 GMT
Not After : May 14 05:01:00 2025 GMT
Subject: CN=0b2e07b481499e499d63516dbcbe8c89c25deabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:2b:f0:ad:1d:f6:d8:03:31:d7:fe:3e:d5:
19:ef:f9:ba:95:e5:95:fc:a6:ac:7c:8b:e0:e4:f1:
19:f0:22:18:e7:f7:d1:89:ac:a6:18:83:a8:fb:3a:
d5:ef:2e:31:8d:43:91:84:36:2c:3b:40:05:dd:e3:
c7:3d:3a:69:10:fc:85:c8:f1:f6:cd:a1:ea:80:32:
c6:2a:76:2e:a0:27:5b:b1:40:ce:62:81:6e:81:67:
70:38:d7:bd:66:3f:37:0b:41:60:f5:e3:6f:fe:37:
6b:a9:dc:94:6e:7a:ac:d8:41:08:85:8e:e4:99:50:
ea:0f:88:5b:db:3e:aa:d5:e0:ce:01:4a:43:92:12:
7e:19:f4:bd:7f:4a:77:9b:42:e9:cb:82:fb:20:fa:
53:70:26:94:e3:95:73:83:7b:84:71:40:49:05:d2:
85:65:e8:26:43:e4:1b:40:d9:b7:7d:35:1f:55:a8:
35:a1:39:dd:c4:43:4e:48:42:77:62:c2:b9:11:2d:
cb:ca:1f:ab:08:a2:33:e5:28:28:6b:fc:62:01:2a:
dd:71:4b:5b:7d:d4:08:f5:db:13:9c:67:2a:bc:97:
4a:18:92:e2:a5:a0:bc:d7:aa:be:08:ba:34:41:0c:
d2:70:45:e3:8c:a9:ca:20:cc:a2:3c:89:90:a3:7c:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:07:B4:81:49:9E:49:9D:63:51:6D:BC:BE:8C:89:C2:5D:EA:BC
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:46:94:a3:50:65:5a:c8:a5:b8:5e:f9:9d:51:20:d5:cd:
f7:a9:8b:a1:f5:a3:d6:8d:37:9a:ea:46:0a:54:a9:d6:cf:1d:
b0:7b:a0:23:70:2d:e4:9e:35:03:4b:c1:fe:c9:c8:bd:0d:72:
6f:33:9f:13:b3:01:5b:f0:3f:8a:3e:a8:2b:bb:b2:cc:9d:7a:
c6:97:09:2a:e2:de:e5:56:8d:71:1b:6c:71:c4:cd:1d:b8:c3:
45:58:57:d4:cc:51:99:f3:f3:c2:93:b1:6b:5c:c9:3e:94:cb:
70:f2:30:ed:30:de:2c:cb:bf:7a:6f:0e:7c:bc:c8:cc:5c:a9:
fc:0c:31:88:45:60:ef:89:b1:ac:9e:b3:6e:26:15:c2:e8:27:
20:03:99:2d:67:fc:8f:8b:6d:f6:a3:06:f8:ac:0b:9e:94:d9:
76:fe:6a:b6:f3:06:44:7a:14:ac:6c:f5:44:ad:3b:c9:e8:4e:
47:79:34:ea:75:7b:78:95:4d:ea:10:e2:e8:7c:8a:0c:d2:10:
9a:40:b8:ed:84:a6:7c:d6:16:51:e5:8c:59:58:70:97:5c:9d:
eb:b0:3c:d6:fb:c1:8f:71:15:13:ab:85:d1:2b:be:a7:f6:7e:
a3:f5:9c:89:e0:25:b2:fb:d8:4a:7f:c1:b2:19:6d:74:58:8b:
89:29:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:13:18 2025 by rpki-client