Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 1qkiTv1nQwVzWQUKQrX2mt+xsXGtEprCOAEHxfkCa9o=
Subject key identifier: 5D:5E:0E:26:36:F0:44:7F:63:10:96:9F:38:19:1D:1E:86:03:E5:34
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 01984965B7005FE403FB4A03AC961D049723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 12D1
Signing time: Sun 27 Jul 2025 01:00:59 +0000
Manifest this update: Sun 27 Jul 2025 01:00:59 +0000
Manifest next update: Mon 28 Jul 2025 01:00:59 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: FFvaqOAsNixrqHqnJu/47I1+zSYTh1oln5Wc0PP/SRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b7:00:5f:e4:03:fb:4a:03:ac:96:1d:04:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Jul 27 01:00:59 2025 GMT
Not After : Jul 28 01:00:59 2025 GMT
Subject: CN=5d5e0e2636f0447f6310969f38191d1e8603e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:90:09:b5:28:3c:3f:a8:f2:12:96:48:61:
61:58:65:9c:37:df:83:68:9e:78:29:72:22:a6:91:
c2:a5:00:de:78:d3:ce:2e:43:f1:f9:24:e9:d2:00:
a0:08:cf:d1:7e:34:bf:fd:0a:3b:bb:1e:85:65:8c:
c9:29:46:51:44:e5:32:ec:9f:f9:2a:0b:14:d6:8f:
9f:24:29:ca:53:37:ad:a2:20:4f:b7:ee:1c:9f:12:
27:fd:09:22:bd:cb:29:7d:7f:b8:9b:60:87:e5:44:
6f:49:d9:83:db:e2:b0:39:2f:f3:5c:87:c8:ac:d8:
b6:cb:72:d3:c7:01:3a:b8:94:d0:1d:3f:76:b8:7f:
6a:79:ac:2d:49:5e:eb:d4:08:d5:96:a6:20:2c:61:
65:26:81:0b:ac:f9:c3:9a:5e:77:b0:2e:34:2b:66:
47:9c:55:f5:b3:25:11:78:6d:78:35:8d:c8:2d:9c:
2b:d9:c6:2c:37:d6:56:2c:83:2a:93:9f:85:f9:7f:
d6:10:e3:6f:77:77:9b:c2:67:ba:67:37:c8:59:73:
fe:b6:14:61:12:a6:9b:d3:96:b4:38:65:7c:08:c2:
a9:78:42:bd:19:3e:ea:16:52:2f:61:4e:20:b2:40:
a3:7b:ae:26:d3:39:95:1e:a7:2e:46:f2:b9:9a:02:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5E:0E:26:36:F0:44:7F:63:10:96:9F:38:19:1D:1E:86:03:E5:34
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3b:68:eb:6b:19:03:28:8b:cf:bd:3d:2b:8d:dc:cd:be:c6:
70:d9:a5:ed:3c:67:62:46:d3:1d:c5:45:68:ab:85:24:44:24:
b5:6a:9c:fa:a8:be:4b:d5:58:92:52:88:19:e2:76:da:8f:81:
be:0c:47:c0:7a:79:2e:d6:20:2e:56:db:bb:fd:29:16:dd:66:
42:e9:57:94:54:bd:a1:2a:eb:0f:e9:5d:61:82:8b:a5:c0:bb:
ea:db:9f:52:98:d7:ed:f3:92:e8:a0:b1:fa:9f:08:07:fa:68:
3a:07:67:15:78:52:3a:f6:cf:9e:66:50:0a:71:b9:aa:70:80:
5d:fb:a1:ec:e5:4d:8b:c8:bb:0d:13:80:6f:10:da:a1:14:47:
5f:a5:5b:af:a9:b0:c6:79:54:20:af:a1:60:3e:39:29:fe:f5:
f4:0a:47:53:22:63:1c:c6:e8:53:a6:8a:2c:d3:e6:f4:b5:c9:
e9:2e:9e:8b:27:f4:95:aa:b8:18:08:6f:31:19:1d:cb:e9:6f:
f2:8d:7a:84:9e:db:a7:b5:a1:22:03:9f:42:ed:d2:62:1b:09:
b7:e3:b2:18:85:a9:10:8e:76:44:5f:4f:85:16:da:b8:51:2f:
bd:ce:e0:37:66:7a:73:55:ae:55:5a:8e:05:58:41:2b:31:9d:
88:c1:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:14 2025 by rpki-client