Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: YqJshe85xLXy06l0ujjtwUfE26gW2zy3xAzA/Zh6hlw=
Subject key identifier: 8E:29:E9:4D:D7:D3:93:3E:28:BE:A6:2E:A7:73:6B:1B:E5:1B:C3:3E
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 0196BE5C5B94550A574F81126DB464032CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 070E
Signing time: Sun 11 May 2025 08:00:45 +0000
Manifest this update: Sun 11 May 2025 08:00:45 +0000
Manifest next update: Mon 12 May 2025 08:00:45 +0000
Files and hashes: 1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: hZdjO19B/uikHa4MUAmrPLvbhNTFQrpz4gT97H9rPRo=)
2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:5b:94:55:0a:57:4f:81:12:6d:b4:64:03:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: May 11 08:00:45 2025 GMT
Not After : May 12 08:00:45 2025 GMT
Subject: CN=8e29e94dd7d3933e28bea62ea7736b1be51bc33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:c9:04:13:e0:57:eb:c9:b7:1e:4e:c3:7e:
ea:e6:52:42:00:43:43:ca:c6:3a:7f:f5:23:c4:17:
69:4a:d7:93:3d:73:78:b3:ef:8d:24:bb:e2:92:f1:
53:d8:e8:93:82:1d:e5:24:7b:b0:3d:f8:98:92:38:
cb:07:9f:f6:87:d6:46:78:66:52:ef:91:5b:30:4a:
6a:14:1a:f4:86:1a:51:04:26:20:34:a3:8d:e8:ef:
5d:be:f6:1d:2c:85:f7:1f:8d:90:18:31:1e:f2:30:
c5:f6:73:1c:16:c0:5d:ab:8e:1b:04:ce:c3:d5:ca:
e2:32:46:8e:27:8c:5d:99:e0:da:76:7c:40:52:69:
ae:0f:14:74:43:c0:04:1e:bd:66:2e:66:22:ae:b4:
d6:f8:b5:f3:7e:ee:77:c0:d9:96:53:54:ab:2a:b0:
e8:48:ed:45:6f:ce:b6:f0:d7:7c:8d:5b:b8:6f:8a:
cf:5a:40:0c:71:0f:5d:eb:d4:b2:86:a2:2c:6d:17:
40:c5:a8:14:9a:38:54:88:b2:10:01:41:79:bb:69:
7f:38:c3:89:44:f7:1d:37:05:39:ba:91:b5:bc:61:
98:0b:2f:f0:9f:ba:1c:25:ca:4d:be:57:38:d0:d5:
03:0e:a4:62:ee:0d:54:8c:9c:5c:cf:28:dd:64:03:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:E9:4D:D7:D3:93:3E:28:BE:A6:2E:A7:73:6B:1B:E5:1B:C3:3E
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0d:16:7b:8f:64:94:6b:8b:3f:90:d5:11:ea:30:f1:ad:b6:
ea:bc:28:60:b9:8f:fe:4f:80:5a:43:74:14:04:e9:61:d2:51:
00:db:cc:b1:81:27:20:8a:b8:68:64:73:ad:fd:8d:21:8f:48:
04:fb:09:06:12:d5:43:a0:1f:d7:f2:71:7b:48:f5:ad:b7:77:
0d:e8:57:92:ef:8c:e3:f9:1e:d0:e9:c7:f5:61:22:2f:4b:5e:
56:b7:8f:db:c6:fa:b4:c0:22:58:d0:78:40:74:d6:a0:6d:48:
dc:88:54:18:65:66:98:8b:81:95:da:1e:2c:8d:23:41:5b:37:
07:39:78:5f:de:0c:f3:f0:54:b6:cb:11:43:9c:64:72:cd:3f:
d6:3b:57:c0:43:c8:b7:a4:77:ab:83:7e:20:5a:49:69:d0:05:
a7:55:ca:02:96:8a:e7:44:f9:95:20:8b:5a:93:9f:28:9b:55:
e5:5c:09:c1:4f:e9:ac:b2:95:52:ab:44:76:10:37:ef:85:ac:
84:6e:3e:43:70:bc:2e:52:ad:fb:70:4c:c0:0e:5a:68:6f:b9:
f3:b2:3a:17:c8:dc:6c:f8:74:15:22:5e:57:ac:e9:c1:74:19:
8c:f6:d9:4e:c1:02:2d:23:0e:d9:b1:8c:d6:2b:13:2c:5c:83:
c8:cf:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:07:39 2025 by rpki-client