Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: ydrHvzFXTUMVQreojMloYOC0y8tbl84eRnZX8RqP54Q=
Subject key identifier: 55:53:28:A1:25:D4:CB:0C:ED:F7:39:B5:A5:50:B0:8F:0F:41:2B:C3
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 0196C2021171EEC9C23056A38180D15E78CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 132F
Signing time: Mon 12 May 2025 01:00:37 +0000
Manifest this update: Mon 12 May 2025 01:00:37 +0000
Manifest next update: Tue 13 May 2025 01:00:37 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: 3tJ+gb4SQ5nTAexthlkyWtsvmoi2WI5QJELTzlsB+m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:11:71:ee:c9:c2:30:56:a3:81:80:d1:5e:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: May 12 01:00:37 2025 GMT
Not After : May 13 01:00:37 2025 GMT
Subject: CN=555328a125d4cb0cedf739b5a550b08f0f412bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:ec:57:23:ee:ab:cd:53:fa:f4:b1:b9:c3:
6b:57:55:61:6c:b7:9e:6e:cf:ea:0f:c1:4e:3d:eb:
09:33:ee:f6:ef:a3:4f:2b:81:ce:92:a7:1e:b7:8e:
16:b7:de:c5:78:34:67:2a:d2:85:d2:c0:19:f8:54:
cc:ee:68:bf:dd:ad:97:19:bc:b3:0e:78:6f:83:fc:
d2:c5:4c:9e:d7:7f:bf:a9:e5:b2:89:fa:d4:e7:8c:
40:1c:6d:ab:1e:54:bf:32:01:be:b2:59:7a:ce:33:
a7:e8:ff:43:8f:36:3d:e4:0e:0f:f7:bf:da:52:43:
d7:ed:16:5c:a3:62:1b:7e:81:08:79:63:7d:81:0f:
63:0d:65:1d:33:e1:94:d8:07:e1:ce:59:b5:c1:e9:
47:07:4c:90:7b:34:e5:84:1a:0d:b3:bf:38:cf:fa:
8b:57:97:ff:ae:cd:9c:f1:fc:ad:ff:9a:ec:5e:b9:
a0:0a:02:24:6c:e0:09:75:6c:09:38:d5:cc:89:55:
be:a6:4d:22:4e:cd:75:d9:0b:14:c2:17:c4:dc:28:
99:08:8b:10:fb:26:dd:65:00:d1:dc:8b:b6:8a:9b:
ab:70:6f:75:de:0b:1c:83:37:12:14:06:fa:f9:03:
07:33:94:8f:75:db:95:de:1b:92:91:d2:8e:03:4c:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:28:A1:25:D4:CB:0C:ED:F7:39:B5:A5:50:B0:8F:0F:41:2B:C3
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:92:fa:7a:a4:7f:50:fc:15:0b:47:09:67:32:52:db:da:
79:d8:43:fa:cc:f2:eb:89:76:95:0f:34:9a:90:d3:b0:a3:e4:
44:f5:17:4c:df:a9:d1:23:ab:0a:7a:0c:bc:32:fc:fb:ba:02:
1d:04:25:54:f6:37:5b:1a:15:1c:06:f3:73:6d:84:d4:5d:5d:
eb:87:9e:ff:d6:17:c3:0c:96:86:11:8c:01:ee:0c:aa:b6:c4:
58:99:14:6e:45:0e:14:67:da:2e:b0:72:16:92:7f:6c:38:b7:
cb:aa:d0:e3:55:23:a3:7b:fc:f2:28:a9:d0:2c:80:47:72:1a:
00:ac:ea:fc:ba:c4:6e:cc:13:de:5d:23:93:2e:b9:01:63:34:
aa:9f:32:cb:34:42:03:b6:81:aa:d7:f6:ca:0e:e4:b3:d9:1f:
f8:9e:d6:ee:5e:3c:4f:6c:db:f5:7e:6d:23:a6:e4:6c:5a:27:
ee:1e:1f:3b:41:15:e0:05:34:91:6d:e8:03:dc:42:24:10:d4:
d1:fc:f7:94:3e:45:b1:70:70:b2:e1:37:d6:53:c3:9f:f0:75:
9c:6a:c4:6a:b3:d8:07:3b:7a:43:0d:4e:ea:ba:10:3c:50:17:
9a:0f:8b:49:fb:43:2a:c7:c4:a7:13:6c:92:34:44:eb:a7:e8:
1f:b4:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:36:41 2025 by rpki-client