Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: eszkq2tQX7/nhWkqvy9gplu/HM5HBkfrgnNP5QOhVj4=
Subject key identifier: A6:39:59:C6:7E:B7:F2:C5:F7:F0:87:40:05:85:0C:12:0C:5C:D7:EC
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 0196B7B5ED9D6936C91882D8DF5A5A7127FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 0820
Signing time: Sat 10 May 2025 01:01:15 +0000
Manifest this update: Sat 10 May 2025 01:01:15 +0000
Manifest next update: Sun 11 May 2025 01:01:15 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: FfgYHUV3ZIf4UPfIrk5G3m2oDLP8dTg4m1CI1u7CiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:ed:9d:69:36:c9:18:82:d8:df:5a:5a:71:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: May 10 01:01:15 2025 GMT
Not After : May 11 01:01:15 2025 GMT
Subject: CN=a63959c67eb7f2c5f7f0874005850c120c5cd7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:66:aa:ec:b9:19:84:33:7b:53:91:7c:9e:
82:f8:c8:9d:c4:0f:1f:8e:c9:58:af:04:8c:1c:bc:
54:94:dd:b0:50:a5:39:81:25:19:cb:91:76:de:74:
83:6e:d7:99:58:0d:ad:1d:43:dc:36:a5:fc:81:3f:
ee:97:d1:b1:44:08:bc:dc:74:47:0f:68:0a:ab:b7:
f7:0a:14:2d:3e:f6:83:9a:65:a0:e7:40:43:b2:a8:
ba:ec:5a:bd:06:45:f7:7f:8e:28:86:61:71:05:9c:
33:50:52:b4:78:62:01:0e:f3:66:36:83:77:ca:81:
d0:b7:b0:58:0e:c2:af:ab:71:b9:8e:89:ba:e5:16:
1b:b8:f2:56:56:f4:20:3a:5d:76:f5:1b:6b:e7:cf:
af:6c:e0:a4:48:4a:8d:62:7b:e1:0f:36:98:fd:50:
b9:2c:ee:a4:c5:18:91:45:cf:a3:20:63:2d:d4:eb:
7d:03:b5:5d:81:4d:89:72:55:a9:ba:e7:03:ba:15:
b9:8f:c8:69:f1:15:79:be:90:bd:4e:f0:95:3f:b1:
c5:0b:53:58:e7:16:35:ed:b6:75:25:5a:b2:6a:94:
76:52:52:78:92:1b:9e:0e:a9:94:0b:f5:07:2c:b8:
91:4d:99:06:f3:89:3a:dd:0b:af:9d:72:66:c2:64:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:59:C6:7E:B7:F2:C5:F7:F0:87:40:05:85:0C:12:0C:5C:D7:EC
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:af:95:3c:2b:01:d3:7f:f6:31:03:7e:1f:35:a8:c3:f0:cf:
94:be:dc:77:1e:b9:1b:99:3e:66:a2:75:91:36:9e:be:05:98:
27:d3:20:06:d3:56:6f:d5:33:f1:b4:e8:15:e4:01:51:82:02:
11:ab:ad:f4:66:dc:70:e6:66:7a:db:b5:0a:6e:2e:08:95:b7:
c3:97:4e:3d:70:2d:2d:b7:ea:80:2a:28:7b:6e:94:67:27:bd:
97:b8:a7:83:b7:50:44:d4:6b:e0:d9:15:cd:ca:bc:23:77:31:
65:d2:3d:0a:f3:bb:bc:86:7f:b4:99:6c:c0:66:0d:3c:d7:45:
b1:ec:ed:8f:de:d0:7c:90:52:5a:fc:bc:d2:bd:a8:8f:e4:38:
80:fb:25:85:0f:04:a2:a0:f5:1a:1f:ae:43:5d:e7:30:41:1a:
45:07:7c:dc:ad:45:0d:5a:49:83:76:d1:6d:e4:03:1a:8b:c8:
5e:a4:21:33:de:a7:78:cd:ce:69:b2:13:7d:15:6b:a7:b5:df:
b0:db:e7:26:f4:13:3f:66:5e:0e:ce:33:5a:4d:44:29:4e:9d:
69:62:aa:d4:65:64:2f:2b:c1:ec:3c:a1:22:38:ee:15:7c:38:
73:bf:72:7f:67:cf:c7:1c:cf:2e:33:97:e7:60:08:b2:fe:c2:
76:52:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:56:17 2025 by rpki-client