Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File: VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier: iwO8pagBNYeS0t9nkyA+2+chE/icrpBIv2FGf+EwLD4=
Subject key identifier: 77:F1:0C:A8:4D:4B:63:3A:67:55:13:3A:41:2D:D2:FD:B9:90:57:76
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer: /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial: 0196BC372A0754E8E30C49A15F44205D0850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number: 0AF5
Signing time: Sat 10 May 2025 22:00:53 +0000
Manifest this update: Sat 10 May 2025 22:00:53 +0000
Manifest next update: Sun 11 May 2025 22:00:53 +0000
Files and hashes: 1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: esFv1D3DAQTVzulPkZsSHY8IomDQkLIS0AcXoFBSLAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:2a:07:54:e8:e3:0c:49:a1:5f:44:20:5d:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Validity
Not Before: May 10 22:00:53 2025 GMT
Not After : May 11 22:00:53 2025 GMT
Subject: CN=77f10ca84d4b633a6755133a412dd2fdb9905776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:04:d9:ca:ab:e7:d4:bd:b1:75:2d:7b:4e:
25:9c:cc:cc:7f:54:c0:02:7a:31:36:a1:e5:77:95:
e0:f2:93:b7:c3:27:b6:58:dc:d8:d3:1b:5b:ed:71:
a4:fe:49:64:93:64:f3:ae:14:ba:f6:f6:3e:04:7d:
2e:62:52:0f:cf:73:04:11:d5:66:35:63:ba:1c:35:
67:94:93:3a:db:cf:1b:a1:d3:05:9b:7c:31:07:8c:
53:45:65:f0:ef:a7:ec:7a:f0:9e:e1:60:c0:dc:2c:
ef:3a:93:c6:d9:2d:82:b5:a0:47:e7:1f:09:a9:7c:
44:76:8d:ab:62:61:11:e0:46:03:98:24:a0:17:66:
a9:da:d2:6d:5d:3a:44:3e:9c:43:95:3d:66:e1:bc:
ed:4a:fb:65:7f:92:aa:58:75:fe:8b:40:de:91:b1:
b4:4c:7e:e1:dc:85:20:f1:97:d7:f8:4e:3c:d6:7e:
f1:8c:9d:97:87:a9:1d:48:8c:73:ea:1d:de:4b:28:
76:29:5d:3f:ca:11:0b:ce:e2:4d:3c:68:a3:98:64:
aa:83:10:0b:2a:72:e0:96:c0:57:52:11:e7:dc:75:
c5:61:8d:56:4d:47:a8:c1:36:6a:1c:ad:ca:1c:0f:
27:5b:64:22:d1:43:cc:f3:99:b2:d0:2d:7b:a2:73:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:0C:A8:4D:4B:63:3A:67:55:13:3A:41:2D:D2:FD:B9:90:57:76
X509v3 Authority Key Identifier:
keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8d:4f:83:c5:be:67:23:87:f1:83:09:3b:49:5e:c4:e7:08:
49:91:b6:0c:b1:12:c4:2b:ce:1f:57:c4:e1:5e:a8:62:0f:03:
8b:d4:94:22:d1:0a:9f:eb:90:59:69:02:14:14:63:c5:22:2a:
68:7e:eb:4f:c4:ff:6d:45:9e:67:b5:a9:a3:70:a1:a2:f1:57:
ea:b8:ca:83:25:4b:e3:e6:25:f2:d0:b2:61:d1:fc:dc:bb:94:
50:45:18:5e:82:25:d5:9b:f1:9e:02:d1:58:8b:1b:41:54:68:
62:12:d7:1f:3a:ac:c0:27:ff:fe:d3:49:f7:44:fa:58:75:bc:
3e:9b:d1:22:5f:a1:c9:f0:cb:ac:fa:24:5c:26:62:49:72:e9:
3b:1c:b3:32:ad:ed:87:f5:07:16:a0:5f:94:55:ff:bb:49:89:
af:9a:89:36:dd:bd:0f:68:47:dc:c4:2b:34:2a:99:bf:ac:c3:
fa:3e:d4:83:b3:9f:02:6b:ac:0c:91:a0:3f:61:a8:7f:95:6d:
fc:a0:cf:d6:33:cb:3b:37:73:47:43:56:20:6d:bf:58:78:62:
a6:aa:92:5e:8f:2d:da:ba:38:ce:f9:8d:09:6b:6c:86:30:5c:
77:81:ea:97:c3:2e:50:c1:7e:2e:ec:8e:2e:43:92:8d:d3:4b:
3f:da:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:47:30 2025 by rpki-client