Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: H8AXTWropa6OA+wrSt/nVpKlLumkoujhEIjfugyKvM4=
Subject key identifier: 5A:91:CC:B1:A2:5B:49:F1:AC:76:AE:DE:8B:22:ED:3A:3C:5E:D1:9D
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 0197488D685912E1A4560A738EDA34986D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0951
Signing time: Sat 07 Jun 2025 04:01:56 +0000
Manifest this update: Sat 07 Jun 2025 04:01:56 +0000
Manifest next update: Sun 08 Jun 2025 04:01:56 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: EFjbVsoKW7IZwE7MVO1yy1+3PxA0lOM/UCUsagXrazk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:68:59:12:e1:a4:56:0a:73:8e:da:34:98:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Jun 7 04:01:56 2025 GMT
Not After : Jun 8 04:01:56 2025 GMT
Subject: CN=5a91ccb1a25b49f1ac76aede8b22ed3a3c5ed19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:bc:b8:3f:ac:20:7f:2a:5f:63:34:bf:0a:
4f:84:77:40:ce:01:5f:5c:0d:53:e0:a7:2e:d6:56:
f2:02:6b:84:dd:ab:2c:24:25:3e:f1:d3:ef:be:7e:
94:07:e1:79:49:04:c3:c2:f3:9e:4b:7c:ef:5f:0a:
e6:d3:4d:3e:be:52:ec:2a:9f:c2:e5:a9:4c:bd:01:
e3:87:65:19:c9:d1:90:6a:5e:c5:9a:9c:54:80:07:
a3:bd:ec:cb:4d:61:04:ab:43:b7:76:9d:49:3d:63:
07:50:1e:ef:7d:ce:5e:62:32:5c:64:54:82:9b:14:
57:d7:22:73:95:21:b0:73:7f:2d:26:25:74:b0:f2:
d6:75:d7:98:73:00:3c:9c:40:0b:69:4d:db:7d:48:
12:d5:1c:7f:2a:45:1c:cc:59:30:66:5e:0a:47:93:
33:99:29:ad:6e:7c:4f:a4:d7:9e:63:64:00:33:49:
3e:e5:75:26:46:c6:b0:4e:d7:f0:ad:ea:29:7b:c6:
a6:df:65:13:32:d9:1e:d4:5b:e7:7b:e0:97:12:d5:
d6:3e:95:c4:78:b2:73:cf:63:6f:36:5b:45:c6:d3:
66:61:9b:68:50:de:e6:2e:be:45:c9:ac:c9:0d:fe:
9e:4d:6e:2a:28:cb:d4:1f:9d:a3:1a:98:c5:d5:d9:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:CC:B1:A2:5B:49:F1:AC:76:AE:DE:8B:22:ED:3A:3C:5E:D1:9D
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ea:c7:92:e3:31:bf:cd:5b:4a:e2:aa:00:44:3c:74:fd:1f:
ff:26:34:0e:4f:9c:07:08:a6:2e:e5:37:b3:24:a9:a3:82:da:
2f:d6:86:8e:be:ee:61:29:4d:e6:62:5f:0b:93:69:73:89:4d:
46:19:10:7b:5e:0a:f7:2f:49:7e:a5:a7:5c:d8:a8:44:e5:6f:
58:b0:8a:23:1c:05:c8:cc:02:87:08:bf:9a:6a:ad:ea:4c:60:
e9:20:a8:f2:17:eb:09:4d:aa:c7:de:4f:49:2d:1a:87:26:32:
3c:34:6f:58:42:a7:4c:0a:d7:16:4b:90:59:e1:d5:ca:fd:01:
13:63:ff:71:6d:1a:4a:65:f9:29:02:5b:7d:cf:4b:e2:82:eb:
cf:d1:78:ab:68:67:d3:56:03:05:27:21:65:9d:2a:c3:83:31:
03:52:44:9c:47:85:5b:bc:ab:64:9d:81:01:11:b9:3c:cf:04:
61:1d:a0:c2:82:87:f3:03:be:bf:4e:8b:45:f6:98:e9:b3:c7:
ed:95:fe:7c:59:0a:fa:f8:84:e2:f0:1a:6b:43:ea:aa:3b:9f:
68:de:64:a6:6c:df:3c:9b:3c:b3:bc:73:87:f8:f7:e9:83:76:
1b:f1:03:16:af:44:00:79:72:08:7b:0a:da:e2:6a:ac:f1:21:
5c:42:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:22 2025 by rpki-client