Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: gvOID/62K1kiw2biy4b+CcYaPakF6DhsdLc6CvT8V3Q=
Subject key identifier: 11:3C:5F:DD:96:E9:BA:4E:72:E6:1D:F5:F8:FA:DE:BC:AE:BC:2D:DC
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 0196BE92EF640E4F7A6F2B0C57AE1C2090C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 01C7
Signing time: Sun 11 May 2025 09:00:22 +0000
Manifest this update: Sun 11 May 2025 09:00:22 +0000
Manifest next update: Mon 12 May 2025 09:00:22 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: zF3hjW8mvBBYLncZDvbKapcd3hWatyGQpPbOnHDq8vs=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:ef:64:0e:4f:7a:6f:2b:0c:57:ae:1c:20:90:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: May 11 09:00:22 2025 GMT
Not After : May 12 09:00:22 2025 GMT
Subject: CN=113c5fdd96e9ba4e72e61df5f8fadebcaebc2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:6c:d4:94:10:92:4c:8a:10:0d:36:86:56:
59:08:c4:43:5a:c5:0f:20:3c:0a:0e:e9:e3:4d:be:
b3:0c:b5:f9:95:ba:7f:ee:a1:03:58:57:81:b5:b3:
18:fb:97:b6:a9:51:51:5e:80:33:74:d9:40:54:c7:
58:58:38:7a:a1:9a:88:a4:77:8a:00:6f:01:dd:59:
72:a3:41:2d:72:df:33:f5:37:0a:ff:c6:b4:cf:10:
9d:67:4e:73:07:45:0f:af:2e:33:87:c3:2f:a4:81:
90:a8:59:a5:4d:fd:e5:ea:b4:0b:fa:f8:49:71:8e:
96:5e:73:0a:24:04:10:a3:3c:d1:86:5c:8e:74:a5:
41:74:2a:73:08:28:07:8e:1e:23:59:47:63:f7:f3:
dd:f4:99:c0:c9:31:c1:b4:df:4b:10:2e:33:61:18:
81:d6:ba:0a:b6:25:76:a9:c6:30:42:cd:85:c8:ea:
8e:30:27:df:84:ad:b3:93:7b:bb:18:32:b9:78:22:
97:c4:c6:82:45:84:e2:68:ac:59:11:75:2a:8d:be:
44:64:c6:83:36:5b:b2:cf:75:13:97:d6:00:fb:e5:
62:c3:05:76:90:29:9c:f6:09:21:31:0e:60:e6:e0:
9f:a9:a4:19:27:69:c9:5b:18:98:12:8c:39:d7:28:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:5F:DD:96:E9:BA:4E:72:E6:1D:F5:F8:FA:DE:BC:AE:BC:2D:DC
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5a:76:8b:f8:db:42:e4:5e:d0:07:1f:6f:25:f9:2f:1a:c8:
00:ab:7d:a2:fc:2f:c6:7e:bc:3a:b8:4d:a7:ab:13:b6:c9:e3:
7f:c6:3d:93:46:64:6c:0d:11:23:cd:e6:f3:d7:0f:0b:b4:a8:
c6:52:da:70:49:01:59:a3:86:5d:d6:5b:8e:9d:44:d7:b9:81:
f6:05:ef:d7:d7:98:f8:77:8e:45:24:66:24:56:8c:c6:2d:8f:
50:81:1a:5b:d6:54:ac:64:e9:f0:56:c1:59:4f:d9:78:38:d5:
c6:70:3b:ad:fd:4a:f1:64:39:07:67:7b:49:28:4e:d9:d4:8e:
26:ab:56:23:ad:cb:78:8f:20:bc:90:81:79:10:91:6d:af:9a:
d9:25:2f:11:be:c6:b5:f1:52:8b:ac:44:42:d7:4d:cf:67:bb:
a4:f6:d3:f6:f2:30:56:13:76:53:54:75:23:c8:69:80:94:cf:
74:73:aa:cd:d0:5b:4b:45:1e:6c:ee:cb:5d:60:e2:43:9c:dd:
76:bb:80:a5:2f:22:e2:b6:b5:67:89:c4:84:e9:d5:e1:77:67:
bf:fc:7f:b8:b9:76:04:18:5f:19:93:f2:c3:70:f1:8b:3f:e5:
a6:b1:33:4b:f4:ea:aa:ee:f1:c8:3f:bc:d6:84:79:35:ea:45:
fa:15:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:38 2025 by rpki-client