Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
File: vFxHuPnkKkkot2dDFqcap21AHjw.mft (raw, json)
Hash identifier: 66y1Kbt/mC0K2J141NOpd4Oq+dTJ1U1O530+MIjzh9k=
Subject key identifier: FC:0E:04:CE:0A:25:60:6B:63:89:72:2E:14:03:54:B9:FE:81:7A:02
Authority key identifier: BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
Certificate issuer: /CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Certificate serial: 0197488C652D36B41E565688A855B4192BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
Manifest number: 0B0D
Signing time: Sat 07 Jun 2025 04:00:49 +0000
Manifest this update: Sat 07 Jun 2025 04:00:49 +0000
Manifest next update: Sun 08 Jun 2025 04:00:49 +0000
Files and hashes: 1: vFxHuPnkKkkot2dDFqcap21AHjw.crl (hash: HaD/QMpFyq4IB7yo0NaWQkZhH+lePFT1SS2UVV6jrNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:65:2d:36:b4:1e:56:56:88:a8:55:b4:19:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Validity
Not Before: Jun 7 04:00:49 2025 GMT
Not After : Jun 8 04:00:49 2025 GMT
Subject: CN=fc0e04ce0a25606b6389722e140354b9fe817a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:c2:46:b0:ce:35:56:36:99:ec:9b:fb:8b:
b2:bf:66:55:71:83:2f:74:5d:d5:b3:ea:f3:3a:7d:
ae:fc:50:f1:4b:5a:4f:c8:e4:64:60:a6:0a:ff:a9:
58:f8:d0:52:87:fa:6b:8b:66:e8:1d:01:7a:f6:27:
7e:9e:91:8d:e6:3e:11:cb:a7:5d:2b:30:4c:09:a5:
b0:bd:79:87:3b:64:d0:b1:1f:79:6d:c0:22:e3:2f:
b1:56:ff:e7:66:81:09:bf:60:e8:a7:40:45:b3:71:
2d:ee:31:c9:8b:f5:3c:2b:aa:7c:3e:b3:4b:15:1e:
92:ae:16:2b:f0:c3:c0:bd:71:c5:79:b0:7b:2b:df:
44:ca:f9:dd:54:bf:c3:ff:46:98:d0:03:34:a5:be:
62:f5:81:cc:e2:3a:b4:6d:4a:87:b8:b9:31:6d:f0:
93:7b:da:46:c6:84:92:eb:60:65:3a:57:ee:0d:28:
2f:8c:d3:5a:3a:74:3f:dc:f4:12:fb:35:0f:fd:dd:
21:8d:c0:f6:74:b9:9f:9a:4a:59:ff:92:e1:18:15:
db:0c:f9:3f:ac:48:bc:57:05:1a:9e:c4:f5:ad:77:
84:9c:d2:f0:72:23:b9:99:ef:71:ea:84:ca:49:3a:
5c:80:e9:80:5b:8b:24:6c:7a:59:0f:5f:84:22:09:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:04:CE:0A:25:60:6B:63:89:72:2E:14:03:54:B9:FE:81:7A:02
X509v3 Authority Key Identifier:
keyid:BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d0:c4:7c:ec:0b:46:20:56:08:96:46:49:33:b2:56:c1:f9:
a7:4e:dd:00:bd:5f:51:cb:d2:ca:dc:7b:ac:c0:55:fa:f2:d4:
79:74:5d:58:6d:81:d6:74:15:b9:87:63:f0:6c:f0:d3:94:0a:
6c:d5:e6:58:26:4d:b5:8a:48:09:3c:b5:42:15:ae:af:77:5d:
83:b2:be:62:b8:4d:3d:af:b3:2e:f6:ac:90:ed:05:46:4d:cd:
2b:a7:ae:37:08:09:54:08:75:97:44:2e:a4:03:2c:93:21:35:
49:3d:14:b4:60:b1:59:57:93:a7:71:e1:07:3b:20:03:3c:01:
08:94:f3:63:fd:74:3d:d4:0d:fb:9a:06:11:f4:33:8e:7e:7e:
e4:47:34:d3:09:eb:33:e3:00:b1:79:8f:3d:d1:a5:c4:33:96:
78:9f:e5:fa:fd:84:33:db:56:54:b3:e7:fc:de:5d:1a:6c:d3:
2f:a3:20:ec:e4:0d:0a:1a:53:72:f9:18:45:57:d0:dd:db:70:
eb:36:f4:2d:16:3c:08:1f:75:29:59:84:16:ff:9b:60:7b:01:
e7:42:2f:88:9f:4c:6b:ff:cd:3d:87:22:fd:35:f7:50:9b:c1:
cd:6e:91:68:c1:1f:2b:45:b7:62:05:ba:67:0b:6b:d5:62:b9:
76:a7:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:44 2025 by rpki-client