Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: AyYy75k+MTch7U5wAZKj3a7VDsaR7UroK9lAQX0DLMg=
Subject key identifier: AF:57:EF:E7:2E:51:34:E9:4E:21:FE:D6:28:57:AD:AA:6D:D4:62:F8
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 0197CBDE8B5FBA00B1A6B48D28F55B2B2139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 0F6D
Signing time: Wed 02 Jul 2025 16:00:48 +0000
Manifest this update: Wed 02 Jul 2025 16:00:48 +0000
Manifest next update: Thu 03 Jul 2025 16:00:48 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: 7i7ErUY2Fd35fKk2mlJVbTQp3x8EnyBr6iIWsOgMtvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:8b:5f:ba:00:b1:a6:b4:8d:28:f5:5b:2b:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Jul 2 16:00:48 2025 GMT
Not After : Jul 3 16:00:48 2025 GMT
Subject: CN=af57efe72e5134e94e21fed62857adaa6dd462f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:b0:62:67:2b:09:23:fe:c1:49:78:90:ac:
cd:fb:a9:60:61:31:8e:82:2c:87:e4:85:0b:8e:78:
6b:3d:0d:e5:7d:70:3f:dd:f6:df:61:f0:a7:48:8d:
1a:fa:75:ac:9d:cb:47:4e:19:c6:ca:a9:56:50:f4:
9d:bc:b1:46:d2:a4:b0:8c:45:c7:29:96:98:18:a8:
7f:30:23:24:95:8f:98:e9:74:03:7d:3a:dc:8d:f7:
da:51:21:7d:4d:d2:8f:0e:18:90:d2:39:4c:b4:5e:
32:44:b1:e4:a6:48:f3:55:03:88:b1:9c:fb:fe:7f:
22:d0:c3:11:e6:18:3e:10:59:23:dd:b8:92:91:ff:
32:80:f8:6d:dc:68:5c:9a:3b:a0:3a:ff:ce:50:44:
4c:8d:50:c4:ff:5e:2a:fd:86:bd:2e:6a:3b:d8:96:
d9:aa:54:16:2c:a5:c5:e1:2c:04:64:9c:b0:e3:a0:
62:7e:23:41:2e:40:2c:d4:3c:c5:cd:c7:36:29:de:
13:d2:45:39:1c:54:96:b1:71:cc:5d:1b:2d:29:48:
e9:6e:9b:5d:60:1a:18:25:69:6f:b6:3d:a1:0d:75:
06:2b:d1:00:bd:68:1f:95:7e:65:af:84:ff:1b:86:
1d:99:32:ac:39:e4:61:fa:a7:f0:25:58:ce:e0:51:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:EF:E7:2E:51:34:E9:4E:21:FE:D6:28:57:AD:AA:6D:D4:62:F8
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:53:18:c6:39:83:36:19:4e:d4:0a:4a:a7:05:a9:c4:18:
21:50:2c:a8:77:03:30:2f:0e:2a:19:76:3a:48:25:d9:d0:9e:
a1:53:3c:27:70:12:59:86:44:aa:7d:d9:17:f7:0c:b6:37:a5:
12:21:e9:0c:6a:6b:e1:5b:ba:22:4e:a2:01:cf:37:74:f1:3f:
43:18:a7:11:65:5d:41:28:31:ab:0c:1c:a1:22:f1:f8:60:47:
01:b7:11:89:f2:b0:6d:36:78:9b:29:c1:89:2f:47:68:57:22:
ba:2a:09:38:18:fe:e0:5e:9c:9c:20:f1:ce:5b:b2:2e:db:c0:
60:40:2b:12:09:b1:5e:fe:fc:cc:99:9c:a5:d2:54:1c:b4:af:
32:a3:01:6c:1f:57:11:99:64:a3:2b:53:5a:70:06:1d:59:a4:
06:eb:45:08:67:b8:8a:45:38:39:bc:17:3f:da:9c:c0:c9:11:
21:f1:56:9d:d4:d8:4d:53:a9:03:4a:2e:03:85:8e:1b:19:68:
29:13:f3:0f:1d:8b:b6:06:a8:4c:dc:73:7e:90:07:2f:aa:d7:
f2:6b:d4:36:81:13:60:a0:4f:1f:ff:78:fa:7c:9a:be:dd:a1:
9a:2a:3e:07:e5:69:1c:9c:3d:f1:75:aa:d0:4c:a0:3e:3d:03:
08:c2:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:39:37 2025 by rpki-client