Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
File: VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json)
Hash identifier: zqrseiCOQjmFKw54Oa0xEYIO9QGYoWK++4DU5MLOHkQ=
Subject key identifier: 7C:1B:50:65:1E:D0:17:61:AA:BD:86:63:F4:CE:DE:26:25:1D:85:75
Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
Certificate issuer: /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Certificate serial: 0196BF00E60EAD813D6CD0423415D14E4402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
Manifest number: 8D
Signing time: Sun 11 May 2025 11:00:29 +0000
Manifest this update: Sun 11 May 2025 11:00:29 +0000
Manifest next update: Mon 12 May 2025 11:00:29 +0000
Files and hashes: 1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: UzxDXIFYk6OXRnmFrZtzSiZvnGneodTrrFIWlV82B1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e6:0e:ad:81:3d:6c:d0:42:34:15:d1:4e:44:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Validity
Not Before: May 11 11:00:29 2025 GMT
Not After : May 12 11:00:29 2025 GMT
Subject: CN=7c1b50651ed01761aabd8663f4cede26251d8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:97:42:b4:25:e5:cd:af:0b:a9:a2:86:54:
2d:43:c8:3f:44:3f:85:4e:b5:1b:78:8e:46:7f:4d:
3b:b2:73:e4:d5:0f:3f:fb:83:9b:aa:a7:3b:e3:ae:
c5:7a:e7:f5:ce:4e:64:53:00:46:5f:7a:9f:1b:ef:
eb:f3:06:b1:98:f1:b9:40:78:4e:7a:09:dd:05:08:
fe:8a:d0:c0:e0:1f:1f:1e:67:9f:04:46:9a:25:04:
04:54:64:18:4b:99:b7:be:97:5b:23:48:43:82:ab:
b1:2c:34:17:f8:fa:ca:52:a1:7f:e7:13:4d:08:6e:
11:48:8d:d8:a1:1a:95:d8:27:4a:c4:15:00:85:04:
c2:ed:7b:89:26:03:1e:85:76:db:33:0d:ae:f5:b2:
c2:e7:15:d8:0e:89:29:3a:39:4f:62:14:6c:dc:e8:
b7:ab:e7:a6:8c:dc:62:2c:c5:10:c6:eb:df:52:5c:
af:a2:84:59:e0:dd:ed:05:a6:c4:7f:5c:8c:8c:9a:
36:b4:4d:18:86:aa:b0:fa:5c:05:40:ba:61:77:e6:
01:e6:07:19:e6:ac:3e:b1:20:5d:b6:19:7a:89:a9:
55:63:51:de:db:08:ba:56:cf:c7:c7:95:00:f1:4d:
3f:95:ff:64:ae:d1:d7:8c:9a:3c:85:15:84:6c:f9:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1B:50:65:1E:D0:17:61:AA:BD:86:63:F4:CE:DE:26:25:1D:85:75
X509v3 Authority Key Identifier:
keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:c6:c8:a6:af:78:32:6a:c8:d6:e8:75:fc:16:b2:5d:d0:
f7:aa:c4:f1:5c:e8:b1:d8:82:c4:7e:0a:e9:44:47:1d:40:f0:
e6:c9:1d:54:ef:19:35:d4:8d:7e:68:aa:72:0a:60:ea:0b:4c:
09:eb:6e:5d:64:d6:e2:52:d7:33:44:11:77:de:cc:5d:a9:3d:
d5:16:29:78:18:45:d1:8f:c1:82:fd:64:02:0a:b0:6e:4f:84:
fd:81:c0:44:5e:56:89:9a:f7:3f:2d:d7:c0:01:cf:74:79:08:
62:b2:70:76:15:4d:55:2b:7a:d2:cf:fe:6c:38:26:72:0b:ad:
db:0d:ee:42:94:66:aa:03:80:8b:84:21:d1:f5:16:7e:c5:d3:
3b:39:91:7c:69:f8:dc:81:48:1a:72:df:5c:78:3d:ef:ac:22:
fa:53:47:d6:4b:46:8b:d3:f9:5d:98:c8:ec:f4:d2:97:c8:a2:
24:38:ad:33:ca:d9:08:60:4b:2f:dc:5b:4f:72:ba:4a:85:ad:
cb:eb:73:60:c9:de:7c:42:17:ba:e6:da:b3:e3:00:0e:c2:5f:
ab:37:63:6b:d9:a4:94:c7:99:ab:53:8c:8a:0f:81:a1:66:02:
56:98:a4:b9:18:49:19:c3:cc:0b:58:91:84:9a:6e:1c:dc:e4:
44:42:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:33:47 2025 by rpki-client