Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: U/MD7cTIcID0oISexhh2sJT9m0Mbn/aIEEfvVkgqhUc=
Subject key identifier: 77:22:2C:28:1D:E3:9A:66:FD:A4:C0:6C:ED:BA:39:11:E4:04:76:2D
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 0196C34B7A3AE4E3702500EFDA14D9F9F642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 10D1
Signing time: Mon 12 May 2025 07:00:25 +0000
Manifest this update: Mon 12 May 2025 07:00:25 +0000
Manifest next update: Tue 13 May 2025 07:00:25 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: RmlC6jLPUBdVZrFWDRgOYel8r6Jq7aQl7LKLXrWNdEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:7a:3a:e4:e3:70:25:00:ef:da:14:d9:f9:f6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: May 12 07:00:25 2025 GMT
Not After : May 13 07:00:25 2025 GMT
Subject: CN=77222c281de39a66fda4c06cedba3911e404762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:a8:1c:c9:ad:dd:38:e0:74:4f:1c:e1:92:
66:6d:f8:7d:d6:8d:d6:0a:1d:43:74:9b:d6:7c:0a:
0a:17:10:2b:64:ac:58:2b:32:8e:68:9b:a1:58:c2:
38:67:0d:1b:e4:d1:30:48:da:45:a9:0b:77:51:d9:
9b:96:ba:51:3f:10:42:98:ee:4c:f3:4d:72:87:b9:
9e:9b:36:5d:b2:89:e6:1a:6e:28:e1:5c:33:8d:4f:
13:22:e7:f5:f8:b6:b3:5b:a0:a1:e9:8a:6c:e9:71:
52:4b:2b:97:0b:13:4a:f4:ea:27:a6:5f:af:a4:fa:
e2:78:94:6a:d4:a9:15:5b:87:fd:a9:62:5e:ff:41:
2e:94:71:bf:41:fe:d2:0a:83:95:fd:05:4d:dc:42:
1c:6a:de:89:ea:37:35:ee:3a:30:19:20:37:36:01:
c1:9b:10:38:6f:23:98:2e:e3:4b:e5:8b:16:14:de:
12:9a:5b:95:20:14:00:54:37:ea:0b:e9:0a:0e:d1:
f8:8a:1d:ff:2f:3c:25:31:3a:52:8a:55:67:b8:e7:
92:c0:76:f4:97:01:64:16:82:6e:87:6e:17:3c:70:
95:37:01:3d:85:6d:b1:5a:93:ee:aa:8c:30:1d:ba:
90:f1:50:c9:a0:39:a5:1b:bf:a8:77:d6:db:c9:45:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:2C:28:1D:E3:9A:66:FD:A4:C0:6C:ED:BA:39:11:E4:04:76:2D
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:a4:23:ee:27:99:62:73:2a:69:4a:ff:16:57:92:6d:ac:
68:ce:ad:f9:50:3e:9a:49:84:fd:a9:74:89:16:94:e7:51:ee:
b3:39:4f:5c:d1:70:62:32:f2:8a:b4:80:c3:eb:09:05:79:71:
c3:8e:8e:8f:ac:06:57:21:e6:b8:1d:11:47:41:97:5b:df:5f:
7f:d8:d0:47:99:66:18:20:ee:4b:be:b1:ff:c4:6d:48:c0:8a:
c5:2a:8e:96:1e:2a:5e:d3:e0:ea:c9:70:7f:32:ef:39:db:74:
be:c8:25:8f:93:99:5d:8d:6b:3d:97:ef:07:d9:cf:34:6d:2f:
28:e8:e2:d0:6d:60:63:75:e8:eb:94:14:15:bf:9a:f2:9c:1a:
65:92:7b:9b:d0:0d:f8:e1:35:2c:10:82:41:f7:7a:93:d6:b7:
7d:30:43:d9:4e:77:7c:f1:e5:ee:1c:13:2d:50:1a:f1:23:df:
a5:f0:2b:d9:bd:97:7e:3d:ff:fd:ee:24:b8:87:a0:d4:f1:1b:
93:01:f4:93:57:69:f0:b7:f9:b5:e7:d0:ea:8d:7f:bc:b4:16:
28:c0:f0:9b:26:a1:06:f7:3f:6b:77:b7:ce:7a:1f:05:45:93:
3b:35:44:6e:de:e2:74:13:7a:da:97:19:f6:c6:24:09:4b:d5:
a5:62:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:50:45 2025 by rpki-client