Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: GjUDDNcCQODsM3LT+nVz1hy18H5tpdYziNPbYEA9tYY=
Subject key identifier: F0:44:CF:EE:EE:D0:AC:2E:6D:58:A9:9C:95:19:F4:A0:A9:D9:87:73
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 019849D35A4A069B4A1A62C3FF8631E7EFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0A77
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: 133gvF67vwH3djXsBO0XcdT1s5FUp3OhW14o3da40WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5a:4a:06:9b:4a:1a:62:c3:ff:86:31:e7:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=f044cfeeeed0ac2e6d58a99c9519f4a0a9d98773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:72:02:8e:38:80:a6:44:e5:52:45:7e:85:
40:bc:15:bb:c7:87:1d:1d:b8:fc:7b:f0:23:5a:77:
8d:73:60:b9:00:71:e3:06:6e:3c:1d:d1:4a:d9:54:
45:5e:b5:8d:71:be:ff:25:84:0d:4e:53:13:aa:34:
c7:48:ef:53:da:83:4f:49:49:04:43:61:b9:1d:38:
c6:20:4d:97:18:17:f0:7a:02:8d:86:a0:b9:29:9a:
d7:9e:1d:b5:38:c1:d4:77:11:0e:f2:19:11:04:5c:
d9:5c:44:08:63:f4:93:81:23:2f:9c:81:7b:b3:23:
d7:8d:da:4d:e6:90:c2:56:87:d8:b0:74:3a:5e:22:
c0:46:b5:c2:1f:83:43:3c:34:00:99:71:17:64:c4:
1a:03:e5:b6:4b:38:42:72:27:4f:f2:3c:81:a7:45:
1a:c1:51:28:52:d2:2f:25:e3:19:e1:ae:cc:ef:31:
7f:c0:3b:ef:61:e8:8c:dc:63:a7:37:e7:dd:51:b7:
24:02:da:ae:17:44:d3:70:2c:45:ac:bb:e1:df:6d:
f6:24:24:9e:0d:f1:01:33:8a:77:2a:58:a9:d4:34:
43:e5:db:3a:93:b9:61:6b:cd:03:6a:f3:3f:b1:34:
79:8b:8e:c0:3e:ed:9d:5d:48:a3:2f:0e:c5:3c:83:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:CF:EE:EE:D0:AC:2E:6D:58:A9:9C:95:19:F4:A0:A9:D9:87:73
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a5:2b:b9:21:b6:1e:6c:69:bf:0c:d2:b6:ad:79:26:58:30:
c1:d7:2d:8a:18:43:72:bb:6a:d7:1b:27:fb:db:44:6c:f3:82:
03:5a:0c:5b:c6:ef:4e:10:68:e7:b0:18:e8:e9:0f:82:7f:9b:
b3:b2:fd:b9:bb:e6:53:7a:58:97:66:cb:6c:02:26:2d:b0:cf:
d1:8e:54:7d:1a:78:21:04:34:c2:ed:a9:6a:64:26:8d:be:2c:
e1:e6:b4:f3:46:c1:46:5c:a9:a6:71:d2:bb:ad:00:c4:9c:9b:
98:c3:2c:b1:64:30:11:b2:44:fa:7d:1b:5b:c7:d0:70:7a:79:
ea:4e:25:01:0c:1f:8c:b0:57:07:6c:26:2d:15:c8:b9:8e:75:
4b:31:a7:18:30:76:9b:1c:23:7e:78:99:9b:51:42:0b:2b:20:
87:8f:d8:eb:64:2b:b1:b6:05:5e:e1:c2:d3:6c:f7:e1:57:8a:
01:bd:d0:f4:e0:b1:89:85:e1:c9:62:13:82:fe:1a:34:40:b1:
47:2e:09:4d:5d:a6:21:21:06:f2:06:72:6c:c6:0e:11:c4:e8:
d9:13:cb:4f:15:9f:b1:b2:1b:ad:25:9e:c5:2a:5a:67:64:dd:
72:a0:3d:a0:39:cf:34:8d:95:6c:a1:86:66:f5:71:19:c8:4d:
ef:a6:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:37 2025 by rpki-client