Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
File: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft (raw, json)
Hash identifier: DdHKFqYgq39Yx41reORbmXy6oMUby/gI+17L2+vDt3I=
Subject key identifier: 54:EC:DA:EC:0F:7C:25:28:B7:93:81:21:8A:8A:6C:9A:6E:0F:88:DE
Authority key identifier: 55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Certificate issuer: /CN=5517c90523f5664180f71e3060dda23172e4cf75
Certificate serial: 0197C9F17A3BC83014AA3B15187E64E0ADE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
Manifest number: 0E95
Signing time: Wed 02 Jul 2025 07:02:15 +0000
Manifest this update: Wed 02 Jul 2025 07:02:15 +0000
Manifest next update: Thu 03 Jul 2025 07:02:15 +0000
Files and hashes: 1: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl (hash: Te7T48u0BXWfLQcWD2Ndsgl8RmgDVUAl0itDOfy5rLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:7a:3b:c8:30:14:aa:3b:15:18:7e:64:e0:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5517c90523f5664180f71e3060dda23172e4cf75
Validity
Not Before: Jul 2 07:02:15 2025 GMT
Not After : Jul 3 07:02:15 2025 GMT
Subject: CN=54ecdaec0f7c2528b79381218a8a6c9a6e0f88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:94:ea:1d:3f:63:f8:1b:37:5e:71:98:30:
13:be:d4:c2:7e:83:91:7c:6e:66:2d:19:d0:6e:92:
f9:3d:a6:c2:83:6a:9f:a3:78:b9:83:08:86:54:37:
db:d3:54:b6:a1:c9:42:90:83:b2:eb:52:54:d7:42:
46:ad:8f:c9:9f:cc:30:3a:65:46:73:32:3d:f0:5d:
f8:73:69:81:87:19:62:de:57:4e:fc:8b:ab:4e:eb:
68:95:70:20:b3:03:11:3b:1d:26:44:cf:e4:e8:85:
29:06:d8:21:7b:5b:af:e1:16:51:f9:0b:b6:a6:c1:
8a:86:99:28:45:10:d0:0d:67:09:55:22:60:9a:22:
ca:47:51:ba:d1:16:83:eb:a3:b3:4f:d6:9e:ef:77:
a8:92:17:8f:36:6b:e9:aa:21:1b:61:1f:f2:7d:47:
61:18:51:60:38:85:b5:44:29:79:42:00:03:d8:06:
a2:e5:33:66:36:86:1c:6e:ce:9a:15:6d:64:99:c0:
d5:51:63:50:37:c8:dd:7b:2b:4f:d5:d6:04:06:7b:
3d:50:ed:e6:9d:f9:f1:b9:ed:34:7e:60:92:ba:a7:
bf:d1:b0:21:27:0e:98:6d:1f:0f:7a:df:aa:fa:dd:
aa:9b:87:1e:ce:43:52:0f:30:15:c4:85:2b:ad:da:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:DA:EC:0F:7C:25:28:B7:93:81:21:8A:8A:6C:9A:6E:0F:88:DE
X509v3 Authority Key Identifier:
keyid:55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:fe:50:94:30:76:c7:4d:e3:fe:a0:6a:36:a5:9c:70:49:
64:5e:6e:63:31:4d:a3:4a:f9:b1:9b:0c:f9:e0:fc:a4:9e:03:
58:dd:79:64:b0:e0:9c:af:70:2d:7a:70:b4:fa:a4:5a:64:3c:
10:1d:7c:e1:12:a0:e7:55:c2:74:8c:dc:06:b1:3e:98:4c:12:
dc:f3:1e:08:7b:09:42:22:3e:3a:ab:9e:81:f6:98:62:e5:fc:
97:d0:4f:07:0f:47:1f:75:4e:2b:26:f7:f0:cc:6f:c8:ed:f6:
61:aa:cf:4a:51:97:b2:c4:12:7f:42:33:a6:5b:1e:50:cd:21:
60:db:58:6f:3e:ed:85:ce:80:91:ce:d2:f6:18:72:4e:91:ca:
75:78:fa:f9:33:d2:79:83:97:67:7a:69:5a:5f:78:52:2a:32:
b7:47:54:bb:70:d6:30:51:87:a4:6a:58:a7:e5:de:34:1d:f3:
de:8c:5b:f5:fe:6c:fd:dc:87:19:0f:94:dd:aa:4b:be:84:58:
3f:1c:f1:86:f0:60:fb:69:75:d3:e4:83:c5:d2:d2:b2:2a:39:
ba:0c:04:ab:6f:29:e9:8b:e6:de:40:3a:2b:99:12:e5:eb:2e:
44:c1:57:cb:3a:aa:2d:22:c7:bd:d2:ce:5f:8f:0a:96:50:74:
e6:17:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:01:05 2025 by rpki-client