Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: FLn138aMX1s3tvwpCUxjYUrORNcWGGKKcYE4qLdKQ70=
Subject key identifier: 99:01:F3:3A:66:2D:24:47:DA:3D:26:E7:E1:AF:11:F3:B3:1E:86:E9
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 0197488C90E31CE2B4A7609A5AFBB56E35C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: B1
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: ddA86BVW51WcZG1pWiQQFk10f93CBJRAb7Hg7VVZ6hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:90:e3:1c:e2:b4:a7:60:9a:5a:fb:b5:6e:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=9901f33a662d2447da3d26e7e1af11f3b31e86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:99:b7:1f:49:e8:81:6f:b3:b9:ed:7e:84:
95:80:be:6b:35:3d:c5:74:4e:d2:a3:43:2a:62:61:
73:89:40:30:3b:cd:f0:f9:ae:f1:e8:45:c0:4e:0c:
d7:76:0a:02:fa:06:99:31:5c:66:55:55:5c:1f:69:
70:12:fb:ad:44:29:8d:02:0a:35:25:d5:6a:60:a5:
d5:3f:76:c0:51:84:16:83:a9:21:aa:f3:d9:91:98:
74:46:9e:dd:cc:44:10:ed:03:24:94:b6:83:fc:2d:
9e:69:ee:87:57:2c:23:68:95:89:c7:75:be:a8:2c:
d8:44:9f:27:d6:b4:d8:a4:eb:4f:61:d0:fb:9d:8a:
c1:e0:dc:b7:79:05:c8:7d:2a:97:c7:48:65:9e:25:
7f:8e:1e:4c:b8:af:b4:ce:4b:56:67:bc:57:5b:82:
31:8a:bc:24:0c:79:ec:fc:b2:b4:5e:32:88:99:0c:
67:df:cc:6b:36:03:5a:37:a7:81:f5:3d:9d:5a:5d:
8f:f3:16:31:5c:6a:28:e3:03:d7:b8:9e:2d:49:d0:
8d:d2:c1:fe:85:17:37:92:13:5a:ab:98:73:03:b9:
91:a7:f3:cd:9e:1b:81:32:e9:9f:2e:e9:8a:e1:cf:
2a:19:66:2f:7a:12:71:a4:41:fc:a7:0e:5b:d6:ab:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:F3:3A:66:2D:24:47:DA:3D:26:E7:E1:AF:11:F3:B3:1E:86:E9
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:51:fd:82:c9:37:5f:6e:17:dc:e6:9e:e8:13:51:36:4c:
53:5c:f2:f7:1f:55:c7:9f:c2:09:95:eb:5f:ed:8e:d4:33:fc:
9c:c2:8b:6a:1f:df:fb:8a:67:77:d7:1d:69:79:b9:79:e2:a1:
b2:1e:73:53:fb:5e:72:06:6c:03:68:17:2c:1f:f7:a5:b9:13:
a3:b0:33:0f:6f:15:7c:df:ed:98:0e:c3:5e:95:8f:6e:28:ba:
be:35:cf:12:e4:57:20:df:d6:40:1e:3b:f7:89:3e:64:08:e4:
ee:86:d5:f3:3c:2a:d0:97:08:6b:0c:66:af:11:0e:42:75:e1:
57:c3:5c:3a:e2:30:14:58:5a:55:08:d6:52:61:07:8d:a7:98:
26:44:95:26:86:51:85:72:17:45:be:94:e3:04:05:1e:b2:4e:
7a:47:4a:a3:09:59:9d:9b:0d:d6:2d:03:fa:e1:38:da:c3:26:
be:4d:c9:4c:b0:ac:46:51:71:06:c5:85:f1:bb:58:64:27:5f:
35:7a:3c:7a:5d:c9:1d:38:62:c8:e8:6b:fd:20:3d:fa:06:d7:
78:d3:be:da:42:55:b8:00:bb:31:34:25:7d:f1:68:6e:07:7f:
52:51:fa:74:98:5b:79:ab:72:0a:bb:16:3c:ff:38:a2:4a:7c:
fd:1b:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:10:58 2025 by rpki-client