Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: gCXoxozIcWgAPffgZoRAESim65Z1bDpQv61fGPzP0SQ=
Subject key identifier: D3:2D:7C:05:D6:B4:32:52:D7:03:0C:1D:8A:49:B5:78:A5:AE:1F:3A
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 01974C323A9B059F42D71B660FE685C69BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 064A
Signing time: Sat 07 Jun 2025 21:00:49 +0000
Manifest this update: Sat 07 Jun 2025 21:00:49 +0000
Manifest next update: Sun 08 Jun 2025 21:00:49 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: mP/7sbxo8tLBRqpnF9BRlva6JOTSstQMncBijRnVCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:3a:9b:05:9f:42:d7:1b:66:0f:e6:85:c6:9b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: Jun 7 21:00:49 2025 GMT
Not After : Jun 8 21:00:49 2025 GMT
Subject: CN=d32d7c05d6b43252d7030c1d8a49b578a5ae1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:eb:4a:ae:9c:db:84:70:39:ed:0a:7f:bb:
4b:f7:5c:1e:a0:ce:f5:a5:0b:09:2b:3c:25:3d:f3:
b5:36:30:78:e6:f4:b1:79:dc:37:72:aa:c6:23:49:
a6:38:af:27:a7:42:7e:20:09:6c:8e:61:f3:38:17:
4b:30:21:d7:5e:95:68:ea:14:11:f1:d5:04:10:3c:
c6:bb:b1:31:2c:ca:f8:80:df:ef:b2:ac:c1:bc:e6:
9f:52:4b:3e:d0:4c:ff:71:d9:f3:30:8f:53:df:3d:
8a:ec:41:5f:3e:19:f2:25:29:98:a3:de:93:f1:b4:
a4:ed:22:8e:89:61:51:2c:3a:8c:8b:c4:b9:09:b1:
b4:9d:ef:90:cd:7f:7a:ec:39:7d:8c:d2:b9:40:ca:
22:f2:c4:52:e0:34:b6:e4:aa:f0:f4:99:e3:e9:ac:
b4:fe:92:a1:80:6e:3d:9f:8e:b3:1f:7a:d7:be:50:
ae:11:0b:7c:e2:db:78:29:75:a6:f3:30:2e:ee:d5:
69:63:a1:ae:b9:67:aa:15:58:24:4e:96:e5:88:4e:
52:29:5c:4e:96:0d:10:6b:d9:17:a5:18:ba:65:30:
ff:ab:04:b9:2e:aa:c7:5b:41:7d:bb:03:59:94:88:
96:e8:dc:8d:89:a2:8a:68:4b:9f:75:f3:a8:8d:0c:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:7C:05:D6:B4:32:52:D7:03:0C:1D:8A:49:B5:78:A5:AE:1F:3A
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:87:7b:70:59:b1:1b:2c:30:8f:0c:dd:ab:09:2e:8a:cf:
dc:26:a6:b1:04:cd:34:49:b4:18:05:a5:a6:eb:98:3b:76:bb:
83:d7:ea:9b:13:cd:7e:7d:e6:e9:4d:fd:78:a2:fe:60:78:58:
4b:38:f7:53:58:8d:a0:86:82:31:51:5d:b3:a6:25:20:fb:7b:
07:ee:12:e0:8a:25:01:d9:94:1b:ee:0d:6d:29:fb:65:8c:87:
e1:0a:30:2e:42:42:a0:ba:1b:eb:01:89:85:2b:e9:63:bc:9d:
5d:5a:65:c2:21:97:4c:27:5a:71:8f:5f:fe:d1:98:8d:8d:84:
16:3a:cc:ce:ff:90:68:fe:73:e2:9c:0b:6f:21:b1:6f:ed:04:
34:d4:bf:8f:a8:31:5a:42:f7:cc:7d:47:d6:f5:22:9a:3e:6b:
cd:02:c8:7e:61:84:23:c6:26:da:6f:da:a0:ee:57:e5:7e:fe:
69:9d:34:50:fe:4a:55:6c:62:fa:72:0c:de:ac:d2:f5:1c:06:
9f:ca:16:a9:73:f7:2c:ab:ff:c0:ae:4a:69:63:7c:50:01:7e:
21:b0:55:f7:63:1c:ec:8b:22:8f:e9:f7:90:44:9f:20:c7:8b:
93:fd:74:38:f1:42:a5:e4:cf:8d:88:0d:97:bb:11:12:dc:94:
28:6a:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:32 2025 by rpki-client