Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: LV2FemjWe3PZmiUQ7VPxdFwR8mb5i1adOn+KXITJ9qw=
Subject key identifier: 43:1C:92:04:2E:9E:0C:2C:8F:48:FD:63:B1:F2:D7:2D:D9:90:9E:8C
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 0196BCA4C7F173A238DCBC63E16981F8B968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 038F
Signing time: Sun 11 May 2025 00:00:37 +0000
Manifest this update: Sun 11 May 2025 00:00:37 +0000
Manifest next update: Mon 12 May 2025 00:00:37 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: RwmZkuhZlnrJbpsO/lh+oxdyUN5O5aO0OdUTHLri97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:c7:f1:73:a2:38:dc:bc:63:e1:69:81:f8:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: May 11 00:00:37 2025 GMT
Not After : May 12 00:00:37 2025 GMT
Subject: CN=431c92042e9e0c2c8f48fd63b1f2d72dd9909e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:23:8e:02:46:3f:18:83:d4:27:cf:fd:a3:
6a:5c:2d:83:c8:58:aa:15:c2:54:5b:be:6c:27:4b:
96:aa:1d:b9:28:5b:14:f6:fd:73:74:07:b9:62:e4:
7c:86:2f:1c:6c:88:d7:79:94:10:e3:e3:5a:d9:7e:
9d:40:8f:38:98:a0:c9:61:ef:13:a9:b9:3c:6b:32:
f1:12:9b:a6:f5:65:74:f8:f2:eb:91:48:48:94:61:
58:40:a3:a3:d5:be:5e:f2:21:ab:81:73:cc:07:bc:
d3:54:70:48:2e:d8:30:f4:ce:d4:8b:33:49:43:bd:
c5:5b:de:23:75:3c:25:51:2b:d3:7f:a1:42:ab:1f:
77:4f:1b:6a:4a:0e:43:9a:14:69:03:04:bd:30:89:
15:be:39:1e:20:0f:c6:3b:eb:c1:9a:f5:1e:ef:cd:
1f:11:ab:1c:15:c9:01:76:46:2d:5e:4a:b1:a7:b6:
21:30:12:72:82:15:1f:3f:c6:f1:c7:31:42:23:d7:
74:49:b5:3c:e1:d8:b4:dd:c5:7a:13:25:4a:c7:58:
df:2e:59:96:dd:01:8e:9a:85:87:96:d0:8c:a5:23:
02:e0:2f:72:e3:1c:5d:19:80:aa:f8:1f:88:17:bc:
1d:79:82:15:d7:5f:a9:e8:8e:1c:d7:50:47:9b:69:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:92:04:2E:9E:0C:2C:8F:48:FD:63:B1:F2:D7:2D:D9:90:9E:8C
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bd:39:db:fe:10:cf:fa:98:8a:b0:c4:f0:68:e7:e1:93:60:
ea:79:15:9b:9e:d4:26:c6:d2:30:a0:7b:fb:d2:de:8f:ed:f5:
c4:7d:03:1f:ae:d2:ea:83:a9:54:f8:3c:db:e5:a7:44:29:d5:
91:16:0a:19:d3:8f:4e:2a:86:18:52:98:bc:f2:0d:ec:cc:f4:
9b:32:e4:bf:cd:14:00:6d:8a:98:49:c3:53:3a:24:14:34:cc:
f7:58:36:a3:c4:e3:a8:bd:62:c5:96:02:81:09:f1:01:fd:6a:
ec:d4:72:b4:30:ee:cd:9d:8a:f6:3c:6a:f9:de:b0:01:d5:37:
1b:dc:0a:c3:ca:b4:c7:6a:f3:16:04:96:5c:86:28:6b:98:49:
e8:17:e4:b1:87:4a:f9:a7:69:fe:9b:d5:7b:51:1a:69:9b:e1:
c5:e5:a4:63:4a:8f:27:44:ad:8c:14:07:7e:33:ff:45:48:fd:
d1:f3:8e:94:f8:ae:26:0b:3b:03:17:7d:81:52:c6:13:a4:b9:
71:32:37:34:cb:36:65:53:56:78:91:47:51:81:79:be:6c:93:
2a:4d:76:2a:1c:13:db:0c:40:0f:77:c5:7a:2d:1d:84:9e:ae:
c8:c3:69:90:50:76:8f:6c:62:2a:ca:20:ed:7a:e7:62:aa:20:
72:96:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:15:06 2025 by rpki-client