Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: jaJC0RmL/KOsQ0OkOJ7RZXlnqU8y+WdhzbDGv31r0I8=
Subject key identifier: 54:57:2E:89:53:0A:F0:70:61:42:8B:59:5B:E9:FA:22:21:78:97:72
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0197469DA0F6758919A38379B8F49A30BA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 124B
Signing time: Fri 06 Jun 2025 19:00:24 +0000
Manifest this update: Fri 06 Jun 2025 19:00:24 +0000
Manifest next update: Sat 07 Jun 2025 19:00:24 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: EJvm6DvPknHSW1AC4/vPNATp/WXSKO24cwXyxwAULgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:a0:f6:75:89:19:a3:83:79:b8:f4:9a:30:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Jun 6 19:00:24 2025 GMT
Not After : Jun 7 19:00:24 2025 GMT
Subject: CN=54572e89530af07061428b595be9fa2221789772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:24:7f:09:90:6a:77:bb:2a:5e:a6:d6:99:
a1:1f:de:4f:ba:0e:79:71:b0:30:78:ed:6b:97:a9:
87:66:e2:dd:7d:49:10:7e:58:22:ae:1c:28:53:51:
6e:fa:24:26:ce:ac:9c:1e:6b:6f:8c:ad:91:46:fe:
46:a5:02:d8:47:f9:20:e0:cc:85:9d:52:04:ff:5c:
36:66:2e:cc:44:b9:71:48:30:a7:89:9b:ac:d7:36:
8c:0b:8c:4e:18:21:59:0d:90:24:4b:a1:a7:eb:c0:
b9:c9:79:49:9b:a2:65:73:96:b4:cc:0b:94:b0:32:
b6:d0:39:9f:bc:0b:c7:d4:17:96:93:60:40:46:f0:
a1:49:3b:20:16:b2:3b:a4:42:02:b6:e2:3b:77:0b:
8a:04:1d:2b:12:61:ca:56:ad:69:0a:f1:5e:f4:43:
e7:5a:96:69:95:ab:eb:13:ab:94:50:58:9d:58:94:
92:9b:47:e9:4a:10:af:03:33:35:71:31:2f:14:3d:
e0:f3:db:1e:87:d2:b7:c0:90:82:e7:fa:67:b3:f2:
8a:ee:8e:2b:d6:60:25:51:ed:1c:73:4a:4f:08:4b:
f8:1c:76:f5:6e:32:91:09:cb:0a:98:8d:15:14:96:
b2:f2:86:a3:1b:19:f7:79:13:cf:ad:cd:4c:08:9d:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:2E:89:53:0A:F0:70:61:42:8B:59:5B:E9:FA:22:21:78:97:72
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:c0:1f:a4:2c:a2:1f:bb:e6:b2:4e:c3:eb:75:e6:a4:4f:
47:e5:8c:ab:77:ec:e2:ab:48:59:b5:54:d6:20:c6:c0:d8:64:
89:20:f8:07:99:6b:7a:a0:0b:f1:57:4c:ac:59:96:9e:13:61:
a0:46:07:0c:58:b1:3e:c6:47:14:6a:64:d4:41:8d:1f:20:41:
f4:f4:0b:13:ec:9c:b6:08:a1:22:01:d2:d1:16:f5:3b:22:3d:
2e:2b:a4:7e:de:6b:17:03:01:99:2b:5f:c8:04:6b:50:9e:90:
59:3b:08:7a:85:44:ca:32:41:52:19:4d:4a:0c:9e:fe:88:f9:
45:c2:26:22:2d:b4:7b:b9:03:91:36:08:8a:b1:0e:5a:99:4b:
c0:70:ba:d8:7f:2f:9c:5b:49:e0:85:c8:77:e0:ef:15:54:93:
ed:ba:bd:6c:c0:76:8c:97:32:92:37:48:b8:28:d9:fb:c8:c8:
f7:85:28:22:ea:fe:e0:a9:48:7a:6e:4f:10:97:bb:a0:a0:b0:
2e:a5:5a:01:7e:63:c1:a3:75:93:4b:6e:46:a0:da:3f:cc:e4:
34:b7:c2:a0:fb:bc:92:e3:35:97:64:65:ad:5e:e6:a4:a3:e4:
91:c6:96:76:7f:8b:c7:a1:26:aa:2e:da:40:5e:a6:2a:62:be:
05:af:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:52 2025 by rpki-client