Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: xKM3KeHYo19KOMV+Lg+7gXzd8N7CPLkMBtlu+K+Iqe0=
Subject key identifier: 15:ED:A1:D0:7A:FA:7C:03:57:C1:F9:0C:B1:61:E6:C5:DF:06:2D:FC
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 0197488C868FA266296B4F8634F5241AA539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 05DF
Signing time: Sat 07 Jun 2025 04:00:58 +0000
Manifest this update: Sat 07 Jun 2025 04:00:58 +0000
Manifest next update: Sun 08 Jun 2025 04:00:58 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: 10Y8tVZBqYsigBPYLt1dVaY4DUBeHlrVoMNEyzpMXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:86:8f:a2:66:29:6b:4f:86:34:f5:24:1a:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Jun 7 04:00:58 2025 GMT
Not After : Jun 8 04:00:58 2025 GMT
Subject: CN=15eda1d07afa7c0357c1f90cb161e6c5df062dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:b4:78:83:34:5a:6a:7e:e7:94:a8:12:fe:
a2:78:d6:44:1d:da:d2:ca:e2:2f:63:ed:90:8a:3f:
55:92:7f:3a:0a:e8:28:fc:ca:a9:d0:5a:25:e0:c2:
a3:34:fa:62:f3:98:02:de:14:63:2f:f6:41:5c:ee:
d2:a9:df:42:c9:cc:59:a3:da:4f:de:67:81:28:3d:
78:64:f6:3b:a4:8f:ac:a9:7e:0b:e8:fe:a6:46:7f:
85:b5:18:7b:64:05:f4:3f:74:a2:81:55:34:79:42:
a9:41:aa:27:71:a8:cb:80:49:83:ba:8b:2a:eb:cf:
2c:70:68:ae:2b:9d:8d:b8:69:21:3d:39:37:48:a7:
a1:a9:bf:8b:d9:e5:c4:11:5e:4d:d5:38:22:55:d8:
39:cc:80:d5:c8:19:ad:0f:39:87:63:e7:c4:e6:94:
8c:3d:a8:18:30:57:84:16:0e:99:42:11:f8:29:9e:
9b:00:d9:d1:14:4b:5a:d8:ef:22:f8:6e:f5:23:e7:
b7:02:f1:90:27:a1:ad:b8:56:95:62:c8:fe:f7:67:
01:73:c4:77:88:87:14:3b:f4:e0:a5:81:e7:15:c7:
76:ee:8d:20:25:3a:bb:75:c3:89:05:1d:92:d4:c8:
1f:59:d2:c8:2e:4e:57:29:9e:40:71:70:84:75:b9:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:A1:D0:7A:FA:7C:03:57:C1:F9:0C:B1:61:E6:C5:DF:06:2D:FC
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:a5:7e:bd:d7:df:d0:ce:fa:43:18:1b:1c:00:ff:ea:fd:
3f:d0:97:02:3f:fc:86:cb:b1:5a:84:f4:b6:49:e6:ab:27:73:
79:71:3c:00:13:e3:05:d9:a1:f4:fd:11:f0:2b:a6:8e:7a:64:
53:04:aa:d7:79:fb:4e:79:71:5b:ab:56:ad:bd:6f:32:49:dc:
97:48:01:8c:09:cd:7d:04:04:6b:45:a3:f2:ef:e4:ce:8a:4b:
1b:26:ef:4c:6b:71:a6:4a:a0:3f:6b:c2:c0:3c:5d:6c:00:4e:
53:48:5c:c1:ae:1b:0a:22:bb:2c:a7:e2:fd:29:65:e4:8b:27:
a0:82:81:52:d5:30:62:26:b2:db:84:1e:e4:4e:e6:1e:d9:26:
21:c3:71:0c:93:71:8e:ff:a8:d7:7a:0e:fc:74:f4:b5:23:9c:
36:1c:d8:1c:e5:b1:37:f2:94:3c:f3:c8:bf:06:f6:d7:5d:81:
ef:c2:00:ac:7e:ba:ae:16:54:38:6c:16:39:6d:57:b0:e3:4a:
4d:6c:1f:04:4e:14:01:52:70:f9:90:fa:66:f9:2b:5f:d5:90:
75:5b:b3:35:b4:f4:d0:2d:fe:3e:c4:66:92:31:9b:b0:3b:5f:
d8:fd:bc:40:71:3d:52:3a:28:1c:ba:07:93:a8:4f:9c:9a:c1:
f3:3c:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:48 2025 by rpki-client