Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: kA9xHK/dPyg+Kb69PWMjGKBNY3gGQ2sal9WfCAKXkp4=
Subject key identifier: FB:A8:78:D7:71:EF:D2:FF:56:8D:C8:61:4B:A5:5D:8E:D9:57:8C:40
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 0196B822E09E6260F58C3CEFCFDCEE01691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 099B
Signing time: Sat 10 May 2025 03:00:15 +0000
Manifest this update: Sat 10 May 2025 03:00:15 +0000
Manifest next update: Sun 11 May 2025 03:00:15 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: M2Wx4L+67AJSiNghgneH++YMMuB/5Vj5Uox8t4mL/78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:e0:9e:62:60:f5:8c:3c:ef:cf:dc:ee:01:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: May 10 03:00:15 2025 GMT
Not After : May 11 03:00:15 2025 GMT
Subject: CN=fba878d771efd2ff568dc8614ba55d8ed9578c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:27:8d:8f:54:6d:a0:77:37:6e:2d:11:2c:
ca:2c:9d:63:08:b0:54:c4:6f:5a:4b:e2:ed:c5:13:
96:44:9b:f0:62:44:bc:be:90:96:51:73:e1:31:79:
41:11:28:02:a7:88:e6:f3:e2:4f:c7:fc:ab:54:a5:
6c:35:86:1f:b6:a7:c8:c8:c5:c5:13:e2:91:c8:f4:
80:9c:64:96:1c:e4:82:ef:eb:33:06:a0:d1:d0:26:
47:58:c5:83:c5:5c:e0:1f:ee:c1:ff:5c:28:22:60:
30:01:a2:52:63:41:44:27:ff:c2:36:d2:30:4c:43:
e5:0b:26:b0:e2:fd:f2:9b:bb:7e:5e:7c:3a:6d:be:
b4:f2:30:0c:97:44:5f:6e:e5:d5:5f:db:af:0a:4d:
70:fc:2a:c9:15:7c:54:58:0f:93:ce:22:a0:5d:54:
f7:2c:b5:b8:74:e2:a0:8c:a9:5b:f5:6b:4b:36:ae:
72:27:47:f0:6a:ce:63:37:25:d6:df:47:64:e1:29:
91:d1:92:55:cd:ec:86:3d:2b:70:35:e4:5e:84:ab:
c4:93:4b:21:f0:0c:e7:3f:83:8f:ea:83:48:1f:81:
1a:5a:6a:de:72:80:20:aa:7a:1d:95:3e:05:fd:d1:
c7:0d:92:fd:9a:f4:bc:03:c5:a0:e0:d7:c8:54:89:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:78:D7:71:EF:D2:FF:56:8D:C8:61:4B:A5:5D:8E:D9:57:8C:40
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:56:0c:be:aa:76:f4:54:a4:6e:27:18:06:b1:27:44:34:41:
49:7b:53:5b:af:2c:9d:58:15:f8:e2:50:d3:6d:38:7f:47:fe:
bf:60:52:1f:21:84:e0:71:fd:a3:54:fd:76:b3:e6:6c:8c:d5:
6c:ba:b1:98:35:67:9a:50:93:0f:ac:df:71:19:52:04:cf:72:
44:5f:e6:af:dd:a3:2a:8e:a8:fe:de:27:26:61:8c:e2:9e:ee:
ba:24:24:e9:83:8c:3d:4b:9a:e1:39:cd:7b:4d:f6:81:68:5e:
9b:36:88:a3:36:86:36:a9:7f:21:6a:cc:61:f0:10:a7:09:82:
67:39:83:cb:70:3a:a0:b4:90:90:8a:fb:a9:5a:4c:a2:56:2a:
56:45:f5:2b:7d:5a:28:49:3c:98:c9:ef:0e:4e:9e:e2:db:42:
3d:0d:ac:73:24:19:96:51:07:df:62:4b:08:e9:cb:35:0a:ca:
9b:1d:16:1c:54:d6:df:22:4d:5f:de:b2:57:8c:a1:41:ba:57:
74:d4:1e:68:3b:8d:15:2e:3e:b1:31:50:06:be:7b:3a:b2:7e:
22:de:1c:6b:8e:e3:ab:4c:5a:75:b2:b9:2d:d1:c2:7f:e2:19:
2f:f3:5b:a7:85:f9:0d:0d:59:22:c1:a8:27:78:4b:cf:44:c1:
ba:65:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:37:33 2025 by rpki-client