
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: 3qkBDkGe+n7mkGq/YTODvMd8J7ep8hOZ9SJuQU0r+vU=
Subject key identifier: 58:F9:F5:80:12:5A:B1:60:E3:D0:9E:FD:A3:01:70:63:F2:16:02:6F
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 0197488CA7BA1B5DC9CF4CCDF35379477FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 1063
Signing time: Sat 07 Jun 2025 04:01:06 +0000
Manifest this update: Sat 07 Jun 2025 04:01:06 +0000
Manifest next update: Sun 08 Jun 2025 04:01:06 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: 58ZAtIiU4Yxmx0/8jr4iVFxXofwFSrEjrtc0YRYUDuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a7:ba:1b:5d:c9:cf:4c:cd:f3:53:79:47:7f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Jun 7 04:01:06 2025 GMT
Not After : Jun 8 04:01:06 2025 GMT
Subject: CN=58f9f580125ab160e3d09efda3017063f216026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:11:b2:60:3e:85:31:a9:35:2b:f9:bf:40:
e2:1a:4c:3e:05:9b:8a:42:0a:1d:9a:62:de:52:38:
15:87:82:cf:4f:9e:9d:01:b3:5c:fb:1b:08:eb:e4:
0d:dd:22:d8:0c:d8:02:ec:ec:1e:f6:e2:a9:02:92:
6a:25:d6:7e:f8:9e:3d:87:d9:e3:e7:d6:39:b5:f3:
f7:6a:f5:b0:9a:d5:ab:71:92:6a:65:9b:73:5f:ab:
91:ba:e1:a4:75:41:44:16:f2:9a:68:ed:92:3b:7b:
07:f3:18:ac:41:21:93:cd:a3:1d:ad:57:8e:f8:7f:
19:2b:8e:86:e3:c6:05:ff:1c:59:d4:2e:0c:dd:d1:
ce:2b:54:cf:cd:8c:c1:75:6c:6d:a1:ab:ec:39:da:
c6:66:da:12:45:c0:d9:a2:6d:a2:95:f5:5f:6c:d3:
40:1a:16:d8:3c:4e:e6:f2:ad:26:25:45:09:15:67:
7c:58:44:20:48:12:ac:07:82:24:e4:64:23:04:fa:
da:e3:53:1e:57:f8:09:27:0c:d3:f4:93:7e:99:52:
5b:99:e1:cf:22:9e:f1:4f:5a:b2:35:94:c1:80:c0:
bb:55:47:67:44:be:6e:83:b2:9a:ed:51:f4:e4:71:
4d:73:1e:e3:bd:7c:63:5a:84:1f:5c:ff:69:b8:1b:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:F5:80:12:5A:B1:60:E3:D0:9E:FD:A3:01:70:63:F2:16:02:6F
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c7:60:39:03:d0:6f:5b:52:5d:1e:68:46:a2:d2:9b:64:95:
a2:94:f1:7e:76:b2:88:e3:9a:4c:42:65:7f:58:99:54:11:28:
a1:74:e2:87:ff:a9:26:19:70:b5:6d:b3:05:d8:01:01:f9:af:
aa:26:a1:53:e4:5c:54:a7:1c:9c:a5:35:db:12:a2:2f:0c:ca:
80:a0:aa:11:2d:7b:5f:2b:02:75:67:68:69:82:26:6f:7c:87:
82:c6:7c:bb:f7:72:e6:d8:32:a5:d5:be:38:f7:94:6d:61:82:
10:4c:ab:e1:bf:68:26:80:82:e3:1a:9a:d1:8d:82:63:97:50:
2f:1d:10:7a:30:6e:b0:6c:c9:0d:61:95:84:a2:d9:38:c1:fb:
d8:07:01:db:97:33:b1:07:54:b9:53:46:8b:1f:eb:b9:e4:ff:
f4:d0:f6:63:89:2d:a6:e2:8a:9a:3b:22:0b:84:0b:3e:a5:94:
33:90:06:bd:ac:16:d5:29:24:8e:1d:87:8b:95:83:9f:8d:e8:
4b:fa:54:db:22:c2:62:9a:7a:9e:e7:52:93:58:8f:77:f7:f6:
73:1e:ed:48:ff:2e:2e:8f:c1:d2:ed:1e:65:94:e5:6c:26:ee:
92:20:58:a2:6e:8a:2a:f4:7c:33:26:eb:65:61:f9:5d:11:80:
de:3b:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:23 2025 by rpki-client