Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: TZlEQhADtec4Sm9RdG3qZ39i1HhnF4bwapDwoW1POrc=
Subject key identifier: AB:70:4F:D4:7A:DE:E1:AE:94:A2:51:FF:EA:81:67:42:51:9B:98:74
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 01975233E5C83A87DF71450EAD14C0E94EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 01:00:22 +0000
Manifest this update: Mon 09 Jun 2025 01:00:22 +0000
Manifest next update: Tue 10 Jun 2025 01:00:22 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: ZTHMSNh0sKOkOfyHRoAmDDaSe8q6Wu+XcXwl3ELG7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:e5:c8:3a:87:df:71:45:0e:ad:14:c0:e9:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Jun 9 01:00:22 2025 GMT
Not After : Jun 10 01:00:22 2025 GMT
Subject: CN=ab704fd47adee1ae94a251ffea816742519b9874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:88:ac:26:bc:01:8b:4e:64:dd:64:51:10:
ba:70:90:11:0b:25:54:ec:06:79:2c:03:5b:56:51:
78:eb:d7:71:c1:b9:1a:7b:eb:fe:af:c8:1d:3b:0f:
c1:9a:4a:cb:cb:a4:3e:5b:e9:2d:99:b0:26:6e:46:
a0:7f:42:1e:3f:b6:d7:b5:ce:dd:bf:ba:aa:e8:27:
57:d2:1d:28:ce:3c:6b:eb:73:d6:0a:df:05:1f:1c:
c9:6f:29:fb:5c:ee:92:bc:5e:46:f9:44:b5:0d:62:
7e:45:8d:2c:ad:3d:05:b8:1f:8d:a1:9a:e9:29:ab:
91:8f:48:0c:b9:6d:61:3e:5e:9f:69:a8:e6:25:54:
30:b3:75:63:fe:cf:2a:50:75:62:80:58:2d:9a:07:
b9:7b:3b:3a:19:90:74:26:1a:04:27:ea:8b:ae:b4:
51:84:89:e4:b9:20:b1:f4:21:88:3a:1b:eb:b3:bd:
a1:d7:fa:97:36:09:98:18:45:2b:10:4f:b0:5a:80:
87:17:86:3f:85:b4:a0:3a:df:e5:4a:c6:b6:40:08:
16:22:c4:d1:5f:b5:4b:0c:92:8f:8b:e0:de:20:da:
4c:5c:07:47:55:33:b4:71:65:6f:8c:ce:42:d4:5f:
8d:47:d8:60:30:db:01:11:52:89:2a:b2:b4:0f:03:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:4F:D4:7A:DE:E1:AE:94:A2:51:FF:EA:81:67:42:51:9B:98:74
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:2f:08:64:78:12:d4:0a:b1:87:cc:d4:7b:5c:6b:26:8d:
54:d9:70:55:31:59:49:7c:dd:ed:cd:c0:c2:a2:0f:b5:19:6f:
fe:af:28:64:eb:29:a4:f6:23:f5:cc:fa:e2:17:58:42:4f:b2:
56:0b:8e:cb:5c:0d:e6:49:4f:d2:9b:62:e3:f5:e6:3c:8f:f5:
9b:7e:df:3e:09:8c:38:6a:ad:f0:f5:83:5c:ec:47:19:d8:01:
c4:ba:bb:87:4d:64:b4:9e:9c:b6:f9:0c:d8:f3:8b:60:7d:eb:
a6:f3:fc:72:0c:c0:2b:e0:c5:40:68:1e:c3:d3:ea:97:63:a1:
31:0d:bc:96:bb:57:05:a8:a9:91:c4:ee:2d:00:e7:b7:0f:80:
0b:06:eb:fd:3a:ce:fc:ed:cb:64:bc:76:02:00:0e:d4:86:0f:
75:bc:1a:e5:eb:30:ab:c6:77:54:f0:05:95:32:c6:73:2c:09:
e0:78:a0:6a:c1:98:36:32:c1:bd:52:1f:b5:15:a5:45:99:ee:
7c:b3:8b:1b:68:e2:65:14:91:41:fb:8a:49:49:7c:98:7d:85:
ad:b9:18:8d:9b:80:67:50:52:3c:ce:ca:77:9b:64:ca:f0:55:
b8:b2:3f:9d:29:f5:d8:c5:33:4d:63:0c:55:f8:f8:41:db:ca:
fe:90:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:18:50 2025 by rpki-client