Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: IVvj8VlwKg96hOuOv4jFU8uGHOSDVcZ34hlJsc3gIkk=
Subject key identifier: 63:40:71:61:3E:32:01:3A:F4:7D:A6:5E:D7:99:7C:3D:FF:8D:C7:83
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0196CD6191414CF5D2FDE447EAC0526ECCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 012D
Signing time: Wed 14 May 2025 06:00:45 +0000
Manifest this update: Wed 14 May 2025 06:00:45 +0000
Manifest next update: Thu 15 May 2025 06:00:45 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: vkyRUKJdm3kMlXwUdNXebqJRvRWGCKodPqH0PlYyWP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:91:41:4c:f5:d2:fd:e4:47:ea:c0:52:6e:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: May 14 06:00:45 2025 GMT
Not After : May 15 06:00:45 2025 GMT
Subject: CN=634071613e32013af47da65ed7997c3dff8dc783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:ce:92:e5:64:32:05:2b:df:26:52:10:9d:
85:01:c3:69:25:3d:f5:dc:1b:f8:86:c0:1c:2f:58:
82:87:77:5c:5c:27:7c:b8:28:82:f0:a2:07:21:ce:
24:6e:69:85:c4:b7:ac:bf:15:3a:ea:3d:6a:af:50:
ce:fc:06:fa:cc:54:ab:32:27:17:75:8f:89:73:d5:
ca:ab:0c:6f:af:01:e2:9c:0b:34:6f:b0:24:de:a0:
c6:af:69:0b:7a:54:cf:2f:a5:8e:3a:2a:f5:46:3a:
4c:0a:bb:9a:de:77:b4:52:61:94:65:3f:72:74:5e:
58:4e:d3:4f:c9:f8:3e:38:dd:7d:a1:a7:1a:43:5e:
d4:e3:75:fa:cc:67:a7:18:15:c3:49:98:7f:3a:64:
97:d1:da:53:4f:40:43:9f:5d:5d:01:01:37:f3:8b:
a3:d3:5f:a2:0d:ac:66:7c:81:67:f4:97:e6:e1:cf:
6a:39:ac:02:3e:eb:e2:b4:ac:69:15:c4:88:96:cf:
c6:15:56:75:71:09:73:78:e2:bc:1b:c5:06:1b:03:
73:5e:1c:22:d2:f8:cc:9f:11:45:6b:c1:05:ae:0c:
e9:bf:cf:ec:ea:81:2d:ee:16:0c:f9:64:45:c6:e1:
be:41:29:12:cd:b9:6e:23:32:59:71:4b:85:91:9a:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:40:71:61:3E:32:01:3A:F4:7D:A6:5E:D7:99:7C:3D:FF:8D:C7:83
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c1:e2:5a:4b:b8:65:9e:43:fa:dd:8c:2c:f9:97:c5:eb:e1:
05:d3:41:c4:ce:21:fe:03:b2:3a:48:3c:cb:01:87:ae:54:f2:
17:cd:41:aa:74:4f:a4:76:cc:1d:a7:9f:37:61:b8:b7:82:e1:
aa:af:1d:58:07:ea:41:29:5f:f7:32:2c:71:5f:fb:ea:a3:2a:
45:44:c2:7d:7c:50:a7:1e:2f:c8:23:c7:50:ac:98:40:d3:22:
55:32:c2:61:9a:27:ec:30:83:d2:ba:5b:26:85:70:20:f4:37:
e2:f6:67:21:13:09:3f:fd:f0:ac:ae:aa:a9:5b:68:9f:71:23:
10:9b:32:96:6e:80:5b:6c:0e:6f:6b:d7:ab:22:61:43:f4:10:
1e:f3:c8:e5:58:12:9d:fa:5e:a4:30:08:fe:89:2d:33:28:93:
44:ba:0d:e5:e4:e5:d6:96:26:a1:a1:16:58:2a:d9:d0:9c:a1:
bb:f9:ae:03:36:f3:43:9d:28:9a:cb:f0:ac:ec:01:da:44:39:
88:f1:d1:7b:b3:26:36:fb:a4:98:67:04:f0:9f:89:52:2b:27:
3d:e7:d9:5f:f7:ea:d5:ea:dc:42:30:5d:85:56:29:c6:8b:e1:
d6:4f:41:7e:d4:78:35:bd:91:46:7f:cc:38:cd:56:83:9a:24:
b0:d6:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:12:21 2025 by rpki-client