Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: 1l+yHCWv+XrLWFQcalW1uI8qB7bNVtvnGyT9hvchDuE=
Subject key identifier: AD:C0:4D:8A:22:3A:1C:73:B9:AA:89:00:87:8F:6E:5E:28:AD:4E:44
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 01984964F301731B191B7C3BEFB0632966D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 09D6
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: DfhmYSrM9dcfSzQi3/8RmcDO6kDV3QprZXoCCRShfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f3:01:73:1b:19:1b:7c:3b:ef:b0:63:29:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=adc04d8a223a1c73b9aa8900878f6e5e28ad4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:ff:cd:58:4d:c1:73:dc:3a:0a:75:77:52:
64:ca:77:2e:a7:f5:b6:13:35:80:98:41:5e:35:d3:
d7:ef:2b:c9:55:89:30:2b:68:e8:1c:94:eb:8a:ca:
a6:5f:aa:02:1c:e3:c8:37:02:d7:33:c4:9f:65:35:
26:a1:c8:8a:aa:c4:5e:50:e4:63:4d:ae:ef:83:2b:
ce:97:e0:6b:ee:98:0d:4a:31:e8:6d:b2:5d:74:6a:
22:b5:f2:cc:31:96:f4:0f:d4:44:50:b4:2d:6f:32:
db:0b:b3:32:51:0e:3d:33:c7:30:f4:5b:af:dd:e5:
bf:69:bf:b2:43:34:03:30:cb:29:91:a1:06:ca:dc:
16:ca:25:d5:8e:7a:dd:b4:97:49:ee:37:d4:4e:78:
8e:86:54:d2:66:ca:f5:05:7a:67:bf:ae:5d:7b:f3:
3e:cc:74:3e:ee:c6:4e:4b:0b:db:83:54:19:c5:7e:
b0:19:de:44:25:8d:da:23:45:16:61:e8:0c:0d:2c:
af:ac:b5:90:28:22:fd:f5:99:bd:6b:06:7b:94:9e:
74:43:50:ff:60:13:90:87:d0:81:1a:49:79:0d:85:
1f:18:d7:b2:83:a5:80:89:bd:1f:d8:e5:7d:62:f4:
c7:3b:b0:0d:01:e3:ff:10:b6:6c:8b:91:4b:a7:44:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:4D:8A:22:3A:1C:73:B9:AA:89:00:87:8F:6E:5E:28:AD:4E:44
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:58:75:9b:17:3a:21:b7:98:72:55:0f:50:db:e1:57:fb:
36:f0:3f:2e:ba:45:c0:10:75:ce:bb:c8:31:14:5f:69:dd:73:
ea:94:61:57:71:b1:2a:e9:0a:7a:0f:15:39:1a:3e:f6:24:45:
e7:07:ea:70:5d:d4:8b:83:98:01:68:09:b2:19:8b:93:ef:7c:
9a:d0:25:2b:f0:96:3b:de:e2:59:7b:fb:ab:35:16:41:63:c7:
ef:cd:de:18:46:db:98:40:9e:78:97:6c:b6:9d:fd:ab:22:c0:
a1:d1:70:4c:0b:d4:41:af:46:9a:20:9d:31:18:a7:4b:03:8e:
4c:47:59:3e:e9:44:19:b4:c8:d4:37:3b:50:27:5c:e4:db:4f:
a2:40:15:f1:ce:c2:14:fd:04:92:fe:6e:cc:4c:8f:73:7a:68:
0a:19:44:a2:49:10:77:87:38:31:19:cc:f1:d8:6f:39:f2:80:
86:c9:34:ea:c0:19:6f:60:cd:12:91:ee:61:0b:c9:51:c4:2e:
bf:6e:78:bd:c1:77:f3:46:49:b0:21:70:6f:5f:97:25:c6:3f:
18:ec:8a:1b:a5:c5:c3:26:b5:a5:da:8a:08:5b:24:fd:b1:4c:
2b:f7:7a:67:24:2d:11:a5:56:95:d8:8f:f0:d9:c5:c0:50:d1:
40:7e:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:37 2025 by rpki-client