Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
File: vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json)
Hash identifier: zETH18CdrS0aLD2WZHEwE+GRXdkBbRoROlQpeDt26Y0=
Subject key identifier: 33:EE:FC:E0:EE:15:BA:3F:69:75:86:E2:E7:9E:95:6F:7E:1E:D9:8F
Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
Certificate issuer: /CN=bcf234c0444416b8852fb347878ad376d0818d64
Certificate serial: 0196CA60941E45945DAB27E154397A6BA8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
Manifest number: 08C5
Signing time: Tue 13 May 2025 16:00:49 +0000
Manifest this update: Tue 13 May 2025 16:00:49 +0000
Manifest next update: Wed 14 May 2025 16:00:49 +0000
Files and hashes: 1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: xBzZLl7MVlw+uma5GJC8x3RJKbrChb6q7ErDskc/sEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:94:1e:45:94:5d:ab:27:e1:54:39:7a:6b:a8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64
Validity
Not Before: May 13 16:00:49 2025 GMT
Not After : May 14 16:00:49 2025 GMT
Subject: CN=33eefce0ee15ba3f697586e2e79e956f7e1ed98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:ab:47:5a:42:b5:ac:bb:cb:72:97:85:7d:
b2:31:d7:2a:c2:fd:c2:c2:d3:ad:35:d4:65:7d:ea:
76:8a:74:42:3e:39:18:db:f9:ac:c1:17:8c:3c:82:
f7:7b:64:82:e2:ee:02:b1:83:dd:51:da:2c:ae:eb:
12:85:d5:de:b9:4b:4f:a1:2c:1d:68:62:a8:39:fb:
8a:97:81:11:a2:11:e5:c6:2b:c7:5a:fe:4d:a4:82:
d2:62:19:70:62:77:9c:17:26:1d:23:d5:69:6d:8b:
36:61:a8:48:fe:1f:ba:97:8d:65:1e:5a:8b:50:70:
22:22:bf:2b:d4:09:00:53:23:03:28:aa:20:30:c6:
39:83:b6:28:63:98:05:ab:52:c9:70:1c:28:81:5d:
bb:54:b8:98:56:67:93:00:fe:dc:5d:eb:ba:87:7c:
8d:37:2d:f7:fe:2c:30:18:22:c3:de:74:33:e9:5a:
db:49:2a:6b:80:d7:04:43:39:ff:5a:ce:01:05:e8:
57:3a:09:2d:51:71:65:0d:db:cd:f9:79:bc:3d:cf:
64:73:c6:8c:59:be:86:81:d9:f4:70:bf:4a:97:1f:
2a:69:14:0a:9e:89:4b:d4:e0:53:ae:4d:a1:43:9e:
6c:14:05:4d:dd:88:d4:d1:e2:ab:8b:96:4a:66:d9:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:FC:E0:EE:15:BA:3F:69:75:86:E2:E7:9E:95:6F:7E:1E:D9:8F
X509v3 Authority Key Identifier:
keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b5:8d:0a:5c:01:ed:b4:7b:53:26:88:ad:42:79:f1:70:de:
87:93:a4:d0:29:ff:9e:0b:31:72:6f:30:65:1b:08:4e:df:9d:
ba:96:6c:5f:99:ad:9b:b7:a5:e8:19:19:ca:96:0e:18:56:3a:
21:87:60:96:d1:b4:c8:26:0c:2e:ec:f0:cd:b4:0d:8b:bc:0c:
3e:19:c7:ed:66:cd:ae:fa:e1:73:81:68:6a:2a:75:a6:c7:1f:
e2:bb:b0:a7:a9:8b:fc:7d:80:a9:fe:d8:51:6f:94:e6:4f:0a:
61:7d:1f:a3:fd:63:a8:5c:46:d1:65:e3:c9:7d:6a:02:cc:ef:
6e:4b:21:e0:f6:e9:de:18:c7:b7:d7:4f:ff:19:be:3c:7b:0e:
55:37:c9:e2:48:f0:47:95:74:63:6b:c4:a2:ee:e4:c4:fa:bc:
82:bc:b7:d5:87:4a:9f:57:cd:b9:48:45:91:35:e8:cc:a8:4d:
94:eb:12:ce:3b:0c:55:4b:79:0a:e4:ad:69:d9:4c:ac:b0:74:
86:aa:5e:b3:5c:e6:ab:d9:aa:2d:1a:01:45:e0:2c:ac:bf:3a:
49:15:b5:4b:53:88:ad:9c:e9:86:d3:0d:2b:09:40:26:7e:ec:
9d:39:ee:2c:4e:c3:d9:b7:7b:37:64:fd:24:1c:a4:19:ac:18:
58:8c:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:24:45 2025 by rpki-client