Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: eKOQUynGojJQhpWjyvIkVEtkzEU0awT+i/S0ViZpffQ=
Subject key identifier: AE:F6:30:C4:1A:25:81:46:0B:26:E1:6B:81:84:A3:18:CB:8B:73:0D
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0196C2390F069A0430B8FCADACB7A087794F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0618
Signing time: Mon 12 May 2025 02:00:41 +0000
Manifest this update: Mon 12 May 2025 02:00:41 +0000
Manifest next update: Tue 13 May 2025 02:00:41 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: uXB+SgikiRpS+tygTmtfUFl0YpMUFUHwQAXjvzBDSDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:0f:06:9a:04:30:b8:fc:ad:ac:b7:a0:87:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: May 12 02:00:41 2025 GMT
Not After : May 13 02:00:41 2025 GMT
Subject: CN=aef630c41a2581460b26e16b8184a318cb8b730d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:ed:63:44:3e:ac:d3:93:21:bc:15:cf:8e:
f9:02:82:54:6e:66:29:61:59:d5:a8:83:0d:66:c8:
c6:d7:3e:c5:62:ae:e0:ec:87:ed:e9:f7:f9:73:af:
98:6a:27:7a:4e:59:17:da:74:d5:e7:60:36:b8:8e:
64:6e:12:72:63:6b:a5:9a:32:0b:69:f1:b2:eb:87:
57:e1:5f:4f:17:16:ca:97:63:f5:82:6e:0a:61:99:
ee:f4:92:0c:47:5f:1f:a1:2d:42:fb:26:19:ad:7b:
1c:b9:4b:e3:2e:f7:6a:a7:45:aa:c7:b0:39:64:d4:
34:c8:bd:4a:64:63:c5:2a:f7:52:3e:46:4d:37:fd:
60:ec:c5:86:06:87:95:ef:e4:03:d3:f8:c9:07:0c:
bc:65:f8:d5:50:b6:47:cd:7c:78:8c:65:10:51:26:
2a:93:ef:72:15:bd:8a:29:cc:94:64:93:b1:3e:bd:
fb:bf:af:c9:06:90:60:8c:f0:5d:7f:ce:b7:b3:a2:
b5:f4:be:73:fa:bf:e0:9f:7b:2a:68:df:59:b6:67:
04:76:d6:b8:dd:cb:d8:b3:6e:da:70:0c:99:3c:f4:
64:5f:8a:34:cc:76:a9:ff:b0:ab:44:b7:99:86:a3:
7f:97:72:3c:f0:a2:12:52:fb:cf:cf:e5:78:7b:30:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:30:C4:1A:25:81:46:0B:26:E1:6B:81:84:A3:18:CB:8B:73:0D
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ee:9f:97:f6:84:8f:97:cc:85:e6:0b:cd:99:a5:e8:be:c8:
52:03:f5:bd:0b:c0:64:62:55:8a:7f:52:e4:1d:e9:90:8a:c3:
f6:66:08:66:6a:c8:b5:94:4a:ff:97:23:c9:ef:66:4b:2c:d1:
8f:49:26:9d:87:1b:88:92:c1:96:fd:e3:31:7a:87:75:34:28:
c8:b0:2e:8c:72:2a:45:56:c1:d4:e2:70:89:f6:c8:a2:cc:13:
b5:10:e5:5d:e7:f8:d5:73:c4:26:a3:f1:51:2e:57:a6:1d:aa:
65:4d:3f:7b:ce:a7:a0:86:93:6b:0e:1e:c9:d1:85:8a:56:6c:
2a:37:a7:81:a0:39:0e:85:bd:79:c3:49:20:fd:94:ce:af:8c:
12:7f:f5:54:96:ec:46:35:49:d5:0b:df:e1:0d:e5:fd:06:be:
8b:ef:4f:45:f1:c7:f0:1e:ec:0f:a2:0d:e8:2f:fc:8e:1b:8b:
fa:30:74:c3:15:33:14:55:40:cb:64:9d:eb:f0:c1:ad:59:a9:
22:8e:76:17:55:34:62:c8:7e:89:80:f3:e8:63:de:60:e6:72:
1b:06:00:43:f7:7c:62:dd:2c:fa:16:0c:7e:ac:b7:0e:d6:83:
96:7e:bf:23:63:2f:83:d7:ae:f0:38:80:fa:b7:de:92:ff:ed:
16:54:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:31:51 2025 by rpki-client