Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: dAZq3mOMBl/71XGDvUs5W3UnXN6+5MIRTdOgvKeQieU=
Subject key identifier: 2E:BD:50:86:44:52:82:26:D4:3F:35:DD:27:E9:9E:88:F7:F7:25:5F
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 0196C728BC916584E93E55F540C9E2600A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 04B8
Signing time: Tue 13 May 2025 01:00:57 +0000
Manifest this update: Tue 13 May 2025 01:00:57 +0000
Manifest next update: Wed 14 May 2025 01:00:57 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: Nw9LUojKeaPZ9cpViQf9uujBstOneIHeOutQecASWA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:bc:91:65:84:e9:3e:55:f5:40:c9:e2:60:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: May 13 01:00:57 2025 GMT
Not After : May 14 01:00:57 2025 GMT
Subject: CN=2ebd508644528226d43f35dd27e99e88f7f7255f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:05:57:21:85:3a:d3:45:36:67:0f:c9:ef:
db:05:c1:2d:de:6d:72:a9:4d:32:cb:94:71:57:65:
0e:c9:6b:c4:e4:fc:fb:bb:2d:0d:bf:be:e2:df:dc:
13:40:e7:a4:7d:ca:66:7f:7c:79:55:6f:52:0e:ba:
20:e6:a6:b1:89:f4:27:f0:ae:6c:78:d3:6b:0f:25:
1e:d5:b9:54:06:9b:6c:23:3f:67:0d:6e:11:be:27:
84:44:25:20:72:cd:9d:c1:12:36:bd:d9:00:1a:eb:
a8:80:59:7c:fc:34:56:b7:7b:8e:08:67:05:c7:46:
fb:f2:a7:b1:6a:a7:86:17:46:8e:dc:42:0a:27:71:
34:1c:e2:e1:ad:97:9e:30:15:f7:44:07:d9:4e:7b:
f8:da:85:a5:8a:ad:df:9e:ea:cf:28:92:d9:1e:b3:
3b:77:39:98:04:81:95:d1:bd:8d:85:ad:c3:d6:a4:
30:5d:2d:71:3e:8f:d3:69:33:a9:c2:60:e1:49:94:
7c:10:ee:ee:0b:97:8e:3a:a0:e8:fc:5c:34:aa:3b:
57:a1:bd:93:c9:99:1c:93:85:12:1b:b5:36:e6:50:
7b:0b:7f:19:c2:37:eb:69:c3:53:90:60:ec:59:d0:
96:ce:71:fb:df:58:95:27:d2:00:c4:8b:c6:eb:e2:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:50:86:44:52:82:26:D4:3F:35:DD:27:E9:9E:88:F7:F7:25:5F
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:46:15:47:62:bc:0a:ee:c1:0a:da:5b:18:5d:ea:a1:69:
c0:20:43:24:a4:e2:1b:3c:26:95:8e:e6:13:6a:93:c9:39:66:
7d:4d:f6:8c:25:c8:e2:ff:df:8f:92:df:db:83:3d:10:ed:06:
87:a0:60:71:53:81:64:0c:8b:9b:6d:81:a5:82:5e:67:38:c3:
fb:95:2b:c2:d6:7d:b7:32:a4:64:d7:57:74:90:38:6c:f1:4f:
41:a2:83:c4:48:3f:ba:a3:7b:a4:78:53:9b:67:22:c0:53:27:
c9:09:da:8d:20:fc:55:aa:f3:0b:c4:74:7b:31:b0:3f:cb:9d:
85:e2:ca:a5:22:55:7f:b8:0e:c4:a5:84:a1:66:90:71:e4:08:
54:b9:e8:ff:73:a5:4b:96:60:6b:ca:47:f1:af:22:b0:db:a2:
88:db:2c:a3:88:13:f9:41:75:58:c2:aa:24:f3:23:e5:d3:92:
a2:83:96:09:b3:4d:09:8f:a1:75:65:10:f0:58:a3:f5:e6:7b:
9c:1d:a1:86:8e:77:25:3c:5a:99:5b:3d:26:92:6f:12:7b:b2:
01:a4:66:ae:15:3d:bb:59:ee:24:a5:49:45:ff:23:5c:f9:d8:
1b:8a:06:b5:84:fd:af:94:41:6c:ff:89:da:92:ce:14:34:bf:
9f:6b:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:17:34 2025 by rpki-client