Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: kfPcyZWb63MhnFuFPAF2Gk2IYYraLc5qiXvUvKK0Lj8=
Subject key identifier: 91:31:C5:78:37:66:10:42:2F:CC:5B:C9:66:07:39:C5:52:F3:5F:DE
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 01984965C57AD8F8457857B8D5AAC4A71FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 08F0
Signing time: Sun 27 Jul 2025 01:01:03 +0000
Manifest this update: Sun 27 Jul 2025 01:01:03 +0000
Manifest next update: Mon 28 Jul 2025 01:01:03 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: PYktGeJsb3xzdFdhKyyQ4GtB+wB+p9Jfn6aHVxyCafM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c5:7a:d8:f8:45:78:57:b8:d5:aa:c4:a7:1f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Jul 27 01:01:03 2025 GMT
Not After : Jul 28 01:01:03 2025 GMT
Subject: CN=9131c578376610422fcc5bc9660739c552f35fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:6f:61:7f:b9:14:4f:6c:16:6b:01:05:4f:
50:4a:72:4b:f3:42:df:2e:7a:a0:b2:f4:bf:99:40:
59:81:4a:8e:54:0c:ad:3e:5c:6a:1d:3f:54:ca:cc:
f3:bf:a6:5d:95:6d:23:39:89:1d:73:9d:28:17:fd:
61:e6:16:03:3a:44:70:a8:2a:d5:01:fa:d0:cb:b0:
dd:6a:e3:35:b6:64:00:f6:ca:73:24:aa:a0:4a:28:
6f:5b:13:a0:ef:9d:7a:2a:93:75:02:f0:a4:cc:8c:
e5:ed:12:58:e1:b7:97:11:4b:71:f8:b6:fc:50:29:
2c:c3:af:0b:fe:d9:52:f5:d8:9d:73:e7:6d:59:5b:
94:f9:92:07:65:44:81:63:a1:ad:06:dd:92:10:44:
c1:8c:3f:97:16:6b:7c:85:19:c5:bb:a9:96:31:96:
57:98:5b:57:7d:a5:a5:99:27:ac:2c:ed:14:0a:a8:
8f:0d:cf:19:cf:50:aa:e0:b3:1d:7a:de:a9:ec:cf:
06:d1:e4:5c:a5:71:20:b2:66:00:7c:06:29:02:44:
46:c5:4b:0f:71:39:c5:ac:ad:7b:b1:b8:75:92:1b:
ae:55:71:d4:ab:6f:87:dd:49:8c:96:db:57:6f:97:
56:55:d8:e4:bf:68:2a:2d:2e:b9:21:03:a7:f7:ba:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:C5:78:37:66:10:42:2F:CC:5B:C9:66:07:39:C5:52:F3:5F:DE
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1b:3f:f3:20:f8:15:49:aa:7e:bc:e8:6d:ec:1c:8e:4e:40:
06:99:a3:77:e8:10:31:2a:61:90:a9:6c:2e:f9:d6:8f:91:e4:
65:ac:98:1c:10:91:8a:2d:22:f2:b2:06:c6:12:c6:b1:6f:f4:
8f:c8:f8:d4:24:a3:78:b6:da:5c:6f:7b:2d:a6:22:bc:15:7c:
0f:37:61:a9:49:91:12:c2:a3:84:25:7b:77:a8:b8:e6:4c:52:
fd:e4:b9:89:60:06:a1:65:81:7f:ed:95:53:71:76:38:ca:4f:
19:f3:72:fe:8b:82:1b:33:df:f5:35:1a:75:f3:cd:9f:03:6c:
62:3b:99:88:97:3b:00:97:45:82:b2:3c:6d:4d:80:b6:ad:69:
15:8e:e3:e9:0f:85:21:17:f2:05:e3:c5:50:0e:e3:c8:a6:75:
03:a5:60:f9:e0:f0:bf:c6:d1:f1:71:04:85:3b:d0:84:13:3d:
bd:71:64:ff:38:3a:31:ef:dc:a9:f9:75:71:ed:8b:91:38:84:
7e:1c:82:4c:ca:f2:be:b2:4e:d3:4b:0f:06:1c:16:d5:67:0c:
ac:60:f2:db:d4:d8:99:44:5c:c1:8b:97:5e:c0:d0:e2:d5:22:
f3:79:d7:cc:af:ac:5a:6a:4c:75:38:5d:33:f9:5d:11:a2:cb:
79:7b:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:20 2025 by rpki-client