Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: TNfXPqAtuWLdo0qrjtzhBBDJfXgxZI3veVAyrM5A+yY=
Subject key identifier: EC:6E:DD:52:CF:4E:EF:0C:96:C2:A4:E6:CF:6C:CA:A4:D6:16:06:59
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 0197488C26C628AAFD08A6011DDC2A4213B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 08AE
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: RjSii4KAqp60tsKu6Y6uTrIsK+M7ADkn57zQ7RDXWh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:26:c6:28:aa:fd:08:a6:01:1d:dc:2a:42:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=ec6edd52cf4eef0c96c2a4e6cf6ccaa4d6160659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:0f:f4:cc:2c:a1:80:c1:8c:05:46:48:ee:
06:04:f5:bb:b6:06:3f:dc:f5:24:c0:af:f7:f8:ec:
9d:bb:1b:da:01:0b:69:b0:aa:f5:96:4b:b7:52:e5:
84:bf:69:b8:b0:04:3b:3a:0c:a8:88:a0:fb:b4:d0:
5f:53:36:a3:78:0c:1f:3c:a1:c3:66:27:5f:fd:33:
74:ed:f6:20:ac:97:94:66:5f:be:36:e2:d0:6c:d7:
39:eb:36:be:2f:86:0d:5b:43:fc:e8:6b:07:3a:d3:
99:26:77:13:33:d9:00:37:f7:79:38:ca:5d:32:01:
be:a5:05:8a:66:30:d3:b2:d2:b5:a3:8a:6b:ae:23:
3b:ec:db:2e:ba:af:3f:8b:9e:c9:a8:24:06:73:65:
b4:d2:3d:1b:71:a7:3a:92:41:2f:99:83:5b:57:50:
e2:9b:24:fe:a6:31:2a:9e:b1:7d:41:8f:6c:f0:25:
2a:e4:c7:e1:a0:2b:be:c8:e9:e7:ff:ae:63:17:80:
59:c7:4a:ca:2a:85:0f:88:95:92:34:b7:d7:b1:27:
55:11:99:02:5c:d1:74:59:c2:be:6a:37:d1:b0:9e:
73:fc:e1:30:08:72:d5:97:18:4c:b4:05:ac:47:bb:
51:af:2d:da:6a:3e:d5:fc:97:e3:53:c6:28:9a:30:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:DD:52:CF:4E:EF:0C:96:C2:A4:E6:CF:6C:CA:A4:D6:16:06:59
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c1:b9:13:4b:7d:a6:79:8d:cf:57:9f:92:ab:b9:51:65:62:
b9:ea:e2:7e:58:56:28:0f:ef:19:de:d8:1e:c8:72:d1:35:5f:
ca:ca:44:e4:53:56:62:63:9c:95:af:82:f5:bf:a0:d4:31:fd:
3c:a5:57:a6:d9:5b:4f:fe:f3:30:2c:7d:11:7c:5a:4a:e6:2d:
d2:94:88:60:c3:61:69:2a:75:68:5b:47:30:10:90:bd:52:1c:
fe:af:33:4c:29:69:0a:98:ef:1f:75:b2:52:6b:0c:d6:2a:a5:
8d:ed:f7:e5:4d:e3:b7:6a:b1:ae:86:bd:21:8f:b4:f3:22:5c:
14:37:62:d3:a8:f4:48:94:82:5c:58:ec:41:c2:5b:f6:74:4d:
9b:8e:b3:48:93:18:4b:d3:47:1b:86:40:fd:52:4b:11:06:7c:
a3:b5:8f:04:82:f4:0f:17:80:b9:71:76:f0:54:7c:58:74:9e:
6a:18:d6:35:77:ed:a3:ec:d1:dd:db:d5:34:ce:74:cc:3c:ba:
97:5c:5e:32:2f:9e:06:8b:08:5c:a1:7d:d9:20:78:a9:d1:eb:
93:2e:1f:b2:2d:9b:5c:51:9e:a6:4f:e3:07:a1:c9:fd:4b:f5:
bd:b7:2c:95:39:b0:da:9a:1e:d1:ba:3e:29:80:33:f3:1d:4f:
7e:43:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:21 2025 by rpki-client