Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: kc27IuMUBI8n7ufQ66KY6B8L6HII6oblOV8BVw57vXs=
Subject key identifier: 44:16:9C:05:40:86:A7:3B:2C:50:2F:A7:F6:33:49:3F:62:8D:6B:33
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0196C125EF869A3B58B6800586DAAA9A6505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0276
Signing time: Sun 11 May 2025 21:00:10 +0000
Manifest this update: Sun 11 May 2025 21:00:10 +0000
Manifest next update: Mon 12 May 2025 21:00:10 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: azABAF37mzqSqSubWptcCaYjIffBo6ZjLjrMklWc/KU=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:25:ef:86:9a:3b:58:b6:80:05:86:da:aa:9a:65:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: May 11 21:00:10 2025 GMT
Not After : May 12 21:00:10 2025 GMT
Subject: CN=44169c054086a73b2c502fa7f633493f628d6b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:08:d6:f7:c8:82:eb:13:98:5a:d2:98:45:
c1:8f:e4:9d:9e:ef:22:59:d8:6e:af:bd:30:83:eb:
bc:ed:6d:2a:72:70:09:5a:64:58:30:a1:98:f7:05:
08:8b:bb:2d:a2:66:77:46:30:f4:fc:14:9b:f4:16:
4f:00:ba:9f:b0:25:30:99:65:2e:e7:1c:8c:db:8c:
71:7d:a9:87:be:2e:79:0a:92:41:a2:7c:83:7d:53:
29:37:a3:10:49:da:a9:69:e0:a0:8a:a6:44:a4:6f:
cb:96:ec:92:3e:12:1c:89:4b:5f:ab:77:be:3e:d3:
7a:3a:ff:d3:39:0e:2f:48:32:38:c4:0e:a5:38:59:
9a:ed:2e:7a:ae:34:78:ee:8a:bb:f3:60:a1:20:ee:
41:42:ff:90:d9:4e:08:29:ef:24:3b:83:9c:0a:11:
99:04:1e:84:4c:6d:c8:bc:5c:2b:cf:9b:f0:88:64:
2d:c3:0e:48:31:49:9d:73:f3:f5:95:06:a7:e7:81:
aa:44:c2:35:5c:b3:ac:0d:98:1a:cb:20:67:0b:07:
84:bc:65:75:73:0a:ce:e5:48:b3:74:9c:d9:3d:10:
b4:0c:a7:5d:d3:82:5b:3a:d8:7e:dc:f9:aa:ff:98:
45:66:11:f5:d7:e3:82:64:74:2e:0b:8f:b3:7a:23:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:9C:05:40:86:A7:3B:2C:50:2F:A7:F6:33:49:3F:62:8D:6B:33
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:90:09:e5:bb:7b:e8:a1:05:ce:2c:b9:78:48:a8:5d:d9:
10:2b:65:5e:c9:a0:9e:d6:7a:ef:f0:53:28:85:81:5d:31:d5:
c9:8b:74:78:88:46:4f:ed:d5:a5:6a:bd:23:58:89:e7:61:8f:
0e:79:24:fc:c2:cd:44:31:14:4e:70:1e:77:1e:3c:f7:40:c5:
24:e9:29:47:42:6f:e5:7f:3b:eb:98:bc:f1:11:14:bb:47:4f:
a8:c6:0a:53:5a:74:e4:57:cc:86:5b:0a:ec:55:a5:07:13:68:
fd:89:e8:3e:30:3f:c6:fc:a3:6d:fc:14:3e:b6:88:c5:fc:22:
e9:60:c1:8c:3d:79:6d:67:07:be:b8:ab:cf:7f:99:03:76:01:
15:79:ec:a7:18:27:5c:fa:ae:51:28:92:23:a2:be:74:a0:ac:
91:76:60:fb:77:a7:bd:2f:45:25:e3:81:7c:cf:7b:72:28:c0:
d0:bc:de:5d:78:60:fb:23:12:fe:26:e0:0b:43:12:14:fb:2a:
2f:12:80:cc:09:08:b4:e8:a8:b2:54:5a:75:e6:ed:f8:4d:91:
bd:df:22:b4:8e:64:c2:6e:3b:2a:14:1c:64:82:1f:ea:d4:7b:
a8:3a:65:45:b6:20:1b:c2:07:ab:b4:89:98:6f:51:79:cd:95:
b2:51:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:40:15 2025 by rpki-client