Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: +gU4D/8seB1uYowTE06OsjADhoX3r28ugMuYqWb4e/U=
Subject key identifier: B0:21:D9:3C:05:8E:4E:09:1F:EA:07:4C:CC:01:38:81:F6:AE:6C:0B
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 0199233123BDFC75648120EC2F25C09348D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 48
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: mCOM9/xKQUlDkcn63tl3wEuBzRQCLbPY7uWjJ6aS9wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:23:bd:fc:75:64:81:20:ec:2f:25:c0:93:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=b021d93c058e4e091fea074ccc013881f6ae6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:94:a4:f8:18:4c:2b:ab:9a:17:e3:80:07:
c5:30:76:33:dd:52:22:ac:53:a3:0d:b7:72:55:51:
1a:ac:a6:e6:69:26:62:86:2e:a3:5a:b1:a3:89:7a:
bb:00:3c:10:6d:9c:b0:26:d4:40:65:cf:be:b0:1e:
82:98:61:40:0a:b6:1b:fd:5e:65:9f:56:55:c7:8a:
d5:1b:ae:5e:34:8f:d0:28:c4:8c:a0:6a:a9:07:ee:
f9:57:b0:cc:05:94:62:03:4f:b7:d7:ca:2e:df:d5:
45:14:94:6e:95:9f:50:52:1f:a5:56:e8:0f:d0:02:
c3:fd:51:ee:ef:10:70:06:1d:c4:e7:59:4a:69:a0:
51:58:4e:d7:eb:9c:b6:38:f7:5c:d7:50:70:37:ea:
2c:44:a1:c7:ce:31:14:f0:d6:88:5a:6a:ad:80:32:
4f:fa:72:4d:c9:cd:6c:c7:58:3e:ae:ff:19:29:12:
f7:a2:0a:62:b3:5f:fe:a1:67:ce:e0:82:f6:b9:32:
77:59:db:84:e2:d9:bf:58:d5:5c:9d:48:23:b9:47:
9c:75:b3:e1:45:d0:5a:ee:68:69:fa:e2:41:3a:7f:
e6:e6:96:c5:8e:a6:0e:f2:4d:c5:2a:63:68:2a:52:
60:d1:df:4f:25:dc:56:96:cf:54:25:f8:ce:ff:f2:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:D9:3C:05:8E:4E:09:1F:EA:07:4C:CC:01:38:81:F6:AE:6C:0B
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:3d:47:f0:c6:09:e7:2c:cf:38:ee:ab:20:d2:ec:9a:6b:
45:0c:7b:ec:4f:34:b4:da:2b:ad:05:a5:d0:51:dc:e2:29:de:
a2:ed:2c:f3:68:33:71:2e:03:19:a1:c7:ce:bc:47:78:4e:6c:
78:52:ef:52:77:16:a4:ae:7c:c1:74:08:9b:a2:8d:9d:10:e3:
e3:50:e4:4a:a9:d5:a5:c6:1b:74:ca:ad:ee:59:6c:7b:0c:ee:
c8:88:6f:1c:97:28:f8:4f:db:fe:53:0e:c4:a1:11:38:54:20:
91:73:10:ca:ee:e4:23:a9:54:bd:1b:4e:67:60:c5:c6:bb:c9:
1a:71:09:33:92:86:3e:02:8b:0d:b9:36:59:cf:72:9d:d6:78:
0f:c6:a8:42:67:bf:23:b4:90:03:cb:33:4f:01:7d:20:6d:fa:
20:d0:9f:38:b8:80:71:7f:8f:ee:51:69:18:3b:8e:b7:22:18:
e9:4b:db:fc:1a:e9:db:2b:57:9c:11:97:b6:93:77:64:78:d2:
57:73:3f:f1:f7:0d:1e:2a:f7:59:18:99:bb:e6:e9:01:c3:6e:
47:4a:fb:35:81:1b:76:7d:e5:2b:79:34:38:99:d9:99:ab:54:
da:60:22:36:4e:00:a4:2a:a6:b5:fa:91:fc:b4:9f:d6:10:ef:
4b:05:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client