Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: P30WmGMCp1/KYn6PIXhKNhGCa62Leo2kUYEwtxCDCEw=
Subject key identifier: 49:82:99:63:61:AD:95:05:FB:23:38:B6:BB:F9:25:56:A4:7D:50:B8
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 0196BF6ECB4A85D4EF5F4A1E23E82FD0C806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 01A7
Signing time: Sun 11 May 2025 13:00:31 +0000
Manifest this update: Sun 11 May 2025 13:00:31 +0000
Manifest next update: Mon 12 May 2025 13:00:31 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: T3jHhqzRpdZYWC3LGW7NUEwL9p8GbgRUnpVGGskiP3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:cb:4a:85:d4:ef:5f:4a:1e:23:e8:2f:d0:c8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: May 11 13:00:31 2025 GMT
Not After : May 12 13:00:31 2025 GMT
Subject: CN=4982996361ad9505fb2338b6bbf92556a47d50b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:d0:64:4b:05:7c:2a:f4:72:e8:50:0e:ff:
59:5d:12:1b:94:d9:24:2e:4c:b7:06:c0:00:b0:bd:
8b:fb:ba:fe:c9:32:a7:bf:d0:0a:19:61:f4:17:23:
04:1b:24:f7:66:ba:16:5c:a1:ae:4b:39:0c:fe:29:
80:4c:3c:89:2a:f5:44:53:be:49:a1:9f:25:bc:16:
5c:3a:4d:29:bb:7b:19:48:0d:7a:0c:72:1c:e5:58:
00:1e:55:ea:df:19:67:60:ab:c8:55:cb:4c:86:6a:
85:86:fd:a2:81:b0:82:a7:96:26:d0:30:f0:f5:a8:
40:a8:3e:73:59:95:cb:ef:3e:80:b8:43:8e:c1:4e:
b8:67:e3:f2:1b:39:34:5d:fa:d0:b1:9c:3c:b1:ba:
33:0d:05:11:8f:8d:90:9e:39:38:cc:12:b8:58:08:
cc:a5:16:32:cc:1d:c1:4d:e8:66:fd:8e:16:bc:6d:
66:07:8e:6b:ea:47:1e:57:69:44:b1:74:bd:b2:d1:
4a:0d:d5:f4:da:45:e8:05:e5:0e:80:13:a6:9d:44:
fc:73:73:ba:bc:cb:58:59:76:04:aa:61:5b:75:bf:
54:c0:36:74:cb:bc:7d:db:34:39:31:bf:08:5e:7a:
29:11:86:26:c4:56:31:80:85:5a:b5:b9:4e:67:f4:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:99:63:61:AD:95:05:FB:23:38:B6:BB:F9:25:56:A4:7D:50:B8
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:82:08:21:7a:ab:e8:6f:91:42:44:6e:50:01:bb:1d:f9:43:
00:d2:e3:7b:87:d4:89:be:d8:b3:de:75:27:2a:a3:5e:09:56:
3f:48:28:8c:2b:14:31:a6:b9:c2:72:7a:b2:78:24:70:78:1e:
58:62:c7:de:80:ac:da:49:a0:90:80:cb:4b:9e:2c:f8:b8:35:
c4:01:00:e5:0c:14:68:6f:0b:b1:ad:45:5d:28:77:f7:55:91:
10:04:c2:95:a1:81:22:b4:cd:f5:49:f6:c2:c3:ba:6b:5c:3b:
26:cb:ae:50:8b:b2:1a:df:79:22:dc:ab:76:7d:25:9f:59:7c:
44:ed:46:bc:d8:51:ed:2d:d4:eb:dd:a2:11:ed:80:e1:39:b9:
65:b7:8f:1a:bb:08:78:21:ea:08:fd:1a:0c:8f:c3:c2:e7:9e:
9a:5c:ce:25:b3:b1:fe:37:d8:a8:9c:5f:a3:9f:b1:55:a1:23:
2f:c1:16:cd:20:a2:c4:be:21:28:c3:d0:bb:34:5f:a7:10:95:
b4:2a:c7:f1:f7:df:a0:65:bf:a9:a3:9f:b6:92:17:ed:04:aa:
82:14:ce:e3:12:f4:a5:ba:f3:81:d8:02:f4:53:24:c2:90:09:
63:6b:9b:13:61:f3:0a:91:26:1e:75:1b:0e:db:34:e3:50:56:
da:0e:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:44:55 2025 by rpki-client