Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: 27g+J1aXLR72bg1Avb8X81XsAR3sgrnsASxZ3M/dlLA=
Subject key identifier: A7:83:23:B4:6C:32:23:4E:1C:FD:40:32:53:01:13:1A:DE:B1:08:E2
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 01969E9ADE84AC2BD60D6259A7DE64A5EEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 08F9
Signing time: Mon 05 May 2025 04:01:11 +0000
Manifest this update: Mon 05 May 2025 04:01:11 +0000
Manifest next update: Tue 06 May 2025 04:01:11 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: O1HjhvafTUBTwItpGHtUqcOD/FK6nM/DQrOw8ZUTpOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:de:84:ac:2b:d6:0d:62:59:a7:de:64:a5:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: May 5 04:01:11 2025 GMT
Not After : May 6 04:01:11 2025 GMT
Subject: CN=a78323b46c32234e1cfd40325301131adeb108e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:15:5c:10:44:76:49:25:b2:a2:cd:35:af:
a6:c8:10:b1:e5:ab:9b:b4:85:95:cb:27:29:db:50:
cd:57:5e:4f:28:f2:96:51:94:49:76:ca:c6:b8:6a:
fb:46:5d:5c:1f:a9:b3:1a:3c:df:6e:44:c5:51:ff:
d7:75:e5:48:f1:ba:9c:b3:1b:80:23:cc:c2:c7:d5:
70:02:9e:05:0f:4d:c9:23:25:5a:dd:56:46:fc:ea:
ca:1c:96:92:04:28:c0:52:38:a0:42:ae:c1:cb:9e:
00:7a:79:6f:28:24:91:a4:be:9e:91:69:f1:18:90:
83:a3:29:1d:fc:d8:5b:48:e5:9d:e4:e1:7b:c9:5a:
0e:d5:df:2b:b2:3d:1d:f1:20:7b:d9:b7:18:a7:51:
7d:dd:92:5d:9c:03:c9:f3:6c:df:e8:f2:fe:8c:98:
5c:9c:ef:ed:ad:16:05:27:8a:e8:b8:17:7a:d6:42:
9f:c1:b3:b2:cb:71:46:a0:3e:13:c3:c3:2e:d6:d3:
e1:dc:7c:c9:1b:5e:b7:98:b3:7a:e4:e0:06:ef:05:
fe:d9:1d:3b:b5:e2:2f:7b:63:63:65:db:d2:82:44:
eb:3e:2a:b5:41:64:79:8d:86:98:bc:aa:a4:08:6e:
23:2f:25:a3:1c:06:c0:0c:f7:c9:3e:ed:8e:48:49:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:23:B4:6C:32:23:4E:1C:FD:40:32:53:01:13:1A:DE:B1:08:E2
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8b:d4:c8:11:05:eb:aa:e3:e4:e1:e6:0c:4e:b1:42:3b:23:
5f:61:37:43:b4:93:eb:7e:3b:05:6a:47:68:1b:78:c2:04:76:
37:52:98:40:ae:74:9f:ec:5c:82:20:b1:d5:7f:37:a6:ba:5c:
5e:df:43:c6:c3:36:2d:e2:ff:fb:e8:fe:50:40:41:6a:f0:8a:
97:60:c8:2d:96:14:23:85:1d:6b:90:78:4d:3d:ed:f7:db:a1:
ff:70:4d:e1:fc:f8:59:ed:d6:b9:58:fa:e8:38:4e:a9:d1:55:
a1:82:a1:d9:c5:19:1d:5c:e1:a0:c9:ca:62:96:c5:4d:c3:35:
47:4b:65:13:2e:f2:0d:96:96:ce:10:b1:4e:ce:fa:18:04:47:
a1:de:36:15:31:b0:a1:a4:d1:b3:73:4a:58:90:34:e2:34:1b:
7b:4c:2b:af:80:38:64:61:97:48:cb:32:1a:1c:2c:b7:68:df:
a9:72:84:d2:03:84:fc:ac:b0:ef:c6:e4:5d:bb:8b:56:9a:21:
ad:5c:89:3c:b5:e8:0c:b2:79:52:61:de:a6:48:6c:93:de:1b:
0f:c7:53:36:7a:1e:9e:5d:b3:0a:94:64:7f:d7:1e:7b:97:b4:
23:ce:fe:92:31:26:26:9b:2b:ae:66:49:68:e7:91:00:d4:25:
36:a5:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:25:15 2025 by rpki-client