Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: flzqBBBFp0OrBzzfW/Iee6DZqHCKGwZlZGNXH8XMdHA=
Subject key identifier: CE:36:6E:02:C0:F3:27:AF:16:CC:93:22:F5:0B:DF:96:EF:C1:36:BA
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0196BFA5E6290D9E1B9841C9D4CA12B2B14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0C2E
Signing time: Sun 11 May 2025 14:00:42 +0000
Manifest this update: Sun 11 May 2025 14:00:42 +0000
Manifest next update: Mon 12 May 2025 14:00:42 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: 3AWWOvEzPPnNZWFoU3TP05neAiz8ZJer6VLXkQshb8o=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:e6:29:0d:9e:1b:98:41:c9:d4:ca:12:b2:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: May 11 14:00:42 2025 GMT
Not After : May 12 14:00:42 2025 GMT
Subject: CN=ce366e02c0f327af16cc9322f50bdf96efc136ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:d4:18:48:6f:d5:00:af:fa:87:df:f0:32:
c1:fd:a7:78:2b:f4:15:b1:28:9b:ad:c7:74:8a:2a:
4c:2e:5a:97:b2:91:25:7d:05:9f:21:f9:66:b9:9a:
cc:44:c5:43:7f:a8:44:12:99:9b:e1:bd:2e:d5:d2:
bd:4e:93:e7:3a:f9:d7:9b:69:6e:8e:da:02:c6:66:
74:d9:51:ea:1d:db:ef:d1:79:19:95:1f:92:3d:27:
af:35:3d:6b:00:22:89:75:01:cf:8d:86:c6:58:1b:
84:f6:fc:fa:7f:a8:75:eb:48:58:72:28:71:d1:0d:
b2:ed:73:1b:47:af:16:89:10:ee:96:5f:38:cb:fc:
af:da:a6:87:ff:bb:e8:85:a6:51:c5:6d:36:82:18:
1c:d5:b0:e2:be:3f:f3:a3:17:b6:ab:5f:53:22:1d:
58:ec:0e:a2:a9:69:8b:5d:79:97:f4:ac:05:78:5f:
3a:fa:98:1f:dd:1d:eb:9a:36:dd:74:78:67:66:09:
eb:14:1c:00:ea:f2:72:ca:8b:54:e6:ca:b0:30:b8:
e9:14:c5:8b:c8:f2:cb:a1:33:86:15:b5:d5:2c:4f:
23:a1:d9:d0:76:c2:37:a3:a8:c8:9b:8a:c3:ea:b0:
10:e9:04:cc:e4:56:03:79:b4:42:46:f8:d7:36:4c:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:6E:02:C0:F3:27:AF:16:CC:93:22:F5:0B:DF:96:EF:C1:36:BA
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:72:75:08:8c:41:56:cc:d3:64:43:8b:ae:9e:27:f4:31:
46:f4:16:f4:83:99:84:c9:13:78:2c:ab:43:74:31:5b:3a:f8:
f5:c6:9c:61:48:60:66:af:ff:d8:0f:62:ba:c5:09:e0:2e:c3:
05:c9:0f:55:7b:7d:27:fc:71:7d:92:99:82:d3:08:4c:9e:59:
1a:08:da:df:35:5d:e9:3b:2a:fd:76:b0:16:f3:0f:4a:00:b1:
f3:6f:1a:4d:5f:0c:a0:d7:40:98:81:ff:ae:52:b4:4a:ed:d8:
5f:a2:fc:83:2f:69:fa:10:70:22:8a:47:32:7d:00:ec:86:1d:
56:15:00:52:91:30:04:a9:22:54:6c:56:11:8d:a2:d5:2d:fd:
52:ff:fd:7b:4d:16:3e:8b:5f:10:5e:43:5b:f4:22:98:60:a1:
f2:38:a8:78:f9:df:22:43:3e:62:b2:c5:55:16:03:35:59:d7:
09:40:ca:7a:1b:3d:23:a5:f0:b6:69:f8:87:51:9c:46:75:76:
91:34:ba:44:3e:bb:05:95:da:c9:be:77:2e:65:65:e9:46:42:
4c:00:f4:2a:12:5b:92:ef:e5:1b:aa:4f:6e:3a:16:66:1e:02:
33:da:c3:09:64:f5:e5:fe:ff:c8:fe:3c:69:8a:84:fb:62:c4:
3d:07:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:29 2025 by rpki-client