
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: KUbg/vLn/NlPoQI5ND8ig68sYsWZSsH3M2v6NaDsm/c=
Subject key identifier: 68:D3:A0:9E:C2:7F:9D:22:D7:C2:6E:83:9B:35:AD:1E:F4:34:92:30
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 0196A164B8FB2B82FF57B86B5DD9A44B20D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0DFC
Signing time: Mon 05 May 2025 17:00:54 +0000
Manifest this update: Mon 05 May 2025 17:00:54 +0000
Manifest next update: Tue 06 May 2025 17:00:54 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: O1yFlU3HseprHZAn5YP1iI0f2E5eXxW4icBIRJvqw4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:b8:fb:2b:82:ff:57:b8:6b:5d:d9:a4:4b:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: May 5 17:00:54 2025 GMT
Not After : May 6 17:00:54 2025 GMT
Subject: CN=68d3a09ec27f9d22d7c26e839b35ad1ef4349230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:e2:93:c4:f3:da:ea:e5:a3:89:7e:56:2e:
c7:31:ce:eb:ff:bf:5e:8f:be:4c:96:7b:f2:7f:8a:
21:a9:ed:35:d2:d5:04:d0:1f:96:c6:c7:36:64:5f:
0d:bc:10:8f:ea:2b:82:9e:9f:ee:04:a5:93:af:d6:
f7:87:45:55:0b:27:2b:8e:ad:41:a3:69:9d:6e:37:
4d:76:f8:70:f6:e3:4a:6c:3f:1b:26:ca:32:49:3e:
ab:a1:90:2c:3c:ac:b6:db:a2:95:73:18:8c:bd:6c:
69:9d:0c:35:62:ef:d1:54:fa:a4:65:79:69:2a:94:
19:08:74:1c:a6:e1:55:ca:44:ae:94:7a:a0:1c:d4:
c1:19:f7:36:a2:77:80:ea:9b:c2:06:f9:90:f3:74:
0f:c9:93:9c:3f:94:8f:b8:9b:be:a3:07:62:10:04:
58:d9:1c:87:76:a2:4d:b7:9f:41:96:4c:a9:77:99:
6f:68:d1:4c:4e:12:cb:5a:bf:e6:d5:1c:c6:16:b5:
8f:39:4b:8c:e7:5e:af:e7:09:9d:9d:2d:81:8c:98:
b2:f6:69:88:ec:d9:ec:4f:a8:8e:c9:f0:d2:b8:3e:
7e:bc:89:c6:e7:89:a5:14:c3:f0:50:6c:ff:cc:83:
8d:42:70:a4:de:23:5a:78:1c:88:5b:c1:da:85:c1:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:A0:9E:C2:7F:9D:22:D7:C2:6E:83:9B:35:AD:1E:F4:34:92:30
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:63:c7:e1:a3:e9:68:fe:a0:cd:73:ba:13:1c:b3:3b:fd:5e:
24:01:5d:d2:05:21:70:40:3f:88:82:90:30:db:bd:75:2d:4e:
64:03:0a:73:fa:8c:b9:5a:b5:64:53:44:46:c5:8d:9c:04:7b:
c4:5d:79:39:7a:41:eb:d5:00:cf:f5:18:16:9a:7b:29:58:fc:
21:2e:ae:fc:8d:be:13:bd:92:a2:7f:8d:55:bf:d3:21:0f:25:
7e:5b:26:b6:d0:4d:63:5f:f3:55:8d:8f:61:8e:f4:6f:d0:be:
e6:8f:cd:8f:de:0b:61:42:e8:e1:40:31:a5:c2:f9:12:67:e4:
68:21:a0:bc:a7:d3:3c:9a:13:6b:83:fb:e3:37:47:3f:5d:19:
da:97:07:34:2c:c9:e8:85:27:d1:17:14:83:d2:70:17:45:23:
ac:e6:b0:9d:1b:f8:d4:ff:a5:d7:e8:67:85:10:53:fd:ac:d2:
b3:e5:ad:e6:a7:d1:ba:35:8d:5f:54:96:84:7d:61:28:c7:ed:
3d:ef:eb:f5:87:1d:35:96:dc:8d:ca:e1:25:b9:c3:d6:cc:16:
97:13:9f:f7:9d:f7:56:3e:f5:1a:51:da:a9:8f:d4:66:73:a0:
77:14:94:79:b1:6d:33:36:96:c7:02:d5:75:d4:82:0d:30:b3:
0a:1f:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:25:19 2025 by rpki-client