Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier: iYkikAHScJekQZdTUO3OhU0BMU1DC08/4YVYPZvRYiA=
Subject key identifier: CA:80:18:4F:96:C1:4D:63:B7:B0:0F:B1:C9:D5:71:A1:82:1F:E9:6B
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial: 0196C9170D0C4464A2EA0CDC55F9710588C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 10:00:53 +0000
Manifest this update: Tue 13 May 2025 10:00:53 +0000
Manifest next update: Wed 14 May 2025 10:00:53 +0000
Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: tVQSQZHoDWVS870dnMXTFcjaGVmk0K+Ub25a8J5nadU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:0d:0c:44:64:a2:ea:0c:dc:55:f9:71:05:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Validity
Not Before: May 13 10:00:53 2025 GMT
Not After : May 14 10:00:53 2025 GMT
Subject: CN=ca80184f96c14d63b7b00fb1c9d571a1821fe96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:d9:3b:ae:19:c1:4d:1e:3a:cc:2a:9a:10:
26:4e:ec:96:5b:6a:92:05:c0:73:bd:47:40:b2:d9:
1e:ff:d6:ac:e6:36:0a:2e:0f:92:4b:ee:8f:4a:53:
4a:86:b8:7c:d7:f1:bf:07:1f:e7:09:bf:55:b5:be:
f9:de:e8:cc:7b:f5:fe:32:1e:4a:c1:dd:2c:49:b3:
d7:07:5b:ca:ab:a7:48:4f:4a:43:3d:d9:57:fc:d4:
c8:48:58:fc:4b:de:cb:2e:38:0a:c6:23:77:b2:f6:
a3:fb:5d:bc:85:d7:de:ff:36:43:40:fa:51:8b:de:
8c:81:c8:c3:5d:4f:1a:25:50:0a:79:f6:96:84:a8:
ff:83:98:7d:ec:3c:04:bd:d6:c3:72:74:e8:ad:99:
66:db:27:4b:cd:cd:89:44:83:7f:b6:38:68:75:c7:
5c:b9:a9:0c:c9:f6:00:6e:d6:d8:22:f8:7b:6e:21:
41:bd:4d:8b:d8:a0:11:96:51:4d:64:da:bd:4c:9a:
cf:28:49:8a:c7:a7:eb:0c:9c:38:98:fe:28:3c:ce:
d8:08:d5:04:07:16:b1:13:e8:b6:23:e8:14:c8:4c:
83:15:e9:b1:51:19:3d:ad:6f:37:ad:b0:35:c7:a1:
10:39:6c:83:d9:ca:0c:a7:2f:92:0c:a0:0a:35:f4:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:18:4F:96:C1:4D:63:B7:B0:0F:B1:C9:D5:71:A1:82:1F:E9:6B
X509v3 Authority Key Identifier:
keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:cd:bb:a1:61:e7:b2:e3:34:27:d3:a1:76:70:62:a3:95:
13:69:18:59:97:93:02:4b:0b:f8:63:0d:ad:a1:1e:e1:2d:1a:
08:d2:45:ba:44:94:13:ea:82:5a:05:28:da:c4:52:2b:a3:d0:
21:d4:6b:5b:9c:0a:01:a1:5e:26:fb:46:65:85:f2:64:55:c5:
59:da:e6:79:16:5c:a1:bf:41:04:6c:71:17:02:17:40:e2:ed:
bf:6a:81:ed:9e:41:45:8f:f0:7a:fb:be:08:ac:67:b4:e8:82:
eb:15:c6:52:91:65:d0:32:23:d4:9f:c7:90:50:6e:b8:88:17:
27:27:a2:cd:8e:72:7b:c6:7d:4b:4f:11:b9:5a:35:f0:36:a6:
e0:ce:90:53:96:bd:23:6e:81:90:f7:20:82:a4:20:99:6e:98:
62:4f:92:ef:39:da:40:36:75:5f:7e:35:0f:27:cd:36:f2:3f:
e1:56:bf:66:a9:bc:06:f0:1b:75:06:73:42:5b:81:94:63:cb:
75:c7:ed:a4:33:64:e3:18:99:7e:8c:03:e0:75:8e:e8:df:62:
cc:83:8b:d7:70:d3:e2:77:e4:3b:41:ab:1b:87:f7:e8:b1:40:
28:83:fe:fc:01:4f:ed:c4:06:e9:84:9a:52:a8:d9:20:c7:0f:
6f:84:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:41:42 2025 by rpki-client