Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: 7z4wlxry/9H90fRQrKVZsaaOAAhkqHiHzogZx6ABTCI=
Subject key identifier: 4B:89:1E:E1:E7:D0:6D:92:6E:C1:72:3C:FA:84:D6:33:71:A7:F7:EA
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 0197488D1354633E43B0D726D9EEB4976062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 11B0
Signing time: Sat 07 Jun 2025 04:01:34 +0000
Manifest this update: Sat 07 Jun 2025 04:01:34 +0000
Manifest next update: Sun 08 Jun 2025 04:01:34 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: T632qinVCIeBWWs/xtMa+xeAIElM9upO7kChJlbPuT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:13:54:63:3e:43:b0:d7:26:d9:ee:b4:97:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Jun 7 04:01:34 2025 GMT
Not After : Jun 8 04:01:34 2025 GMT
Subject: CN=4b891ee1e7d06d926ec1723cfa84d63371a7f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:48:db:2e:eb:d6:cb:cf:ca:d5:2b:81:98:
36:b1:3a:f4:8c:ed:01:f6:b5:88:4a:f2:18:cf:72:
87:8b:6e:16:fb:08:0f:60:59:22:bf:36:ae:58:a6:
f0:9f:a7:27:fa:be:ca:38:07:fa:99:09:f7:3f:f0:
8a:33:0c:77:6f:3e:c9:8d:e5:bb:57:5e:1d:b1:cd:
f6:68:5f:0a:dc:27:dc:e7:90:86:3d:1d:f6:2c:f9:
59:19:37:3e:d7:ac:0a:be:6a:de:c4:74:f5:98:75:
39:63:0b:16:99:b2:2c:be:5f:a1:4c:26:69:05:74:
31:8e:82:2a:ce:b6:29:a2:d8:e5:d0:8e:31:5e:26:
b4:5e:6f:6a:3e:6e:4b:a0:01:0a:3d:27:ac:5e:d9:
e7:e0:7a:f6:d5:1a:5d:4c:8c:8c:f6:4c:b8:be:1d:
49:6a:ee:60:af:76:1d:94:58:3e:23:f5:f1:fd:3f:
a7:17:d7:e1:a6:0c:95:50:10:f2:cf:b7:a1:75:58:
e6:b1:9e:30:ae:17:95:de:32:22:6a:e9:f8:3e:b9:
ad:67:6d:1b:c5:03:34:25:e5:ec:b0:b1:c9:08:e4:
fb:fa:0d:67:ba:c2:81:38:18:c0:a1:c9:b9:5a:15:
cd:4b:7e:fd:b9:67:f2:3c:c1:4c:30:ee:c8:a3:51:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:1E:E1:E7:D0:6D:92:6E:C1:72:3C:FA:84:D6:33:71:A7:F7:EA
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b6:74:65:3d:8a:72:75:dd:53:58:dc:57:b0:7d:45:b6:29:
65:33:5d:f6:45:8d:35:98:0f:4f:16:f0:9d:d1:6b:be:7a:37:
0a:75:f2:a1:d1:fa:0b:09:ee:b1:e0:a7:1b:fc:09:c7:b6:c6:
24:bb:03:b0:04:9a:95:7a:e3:70:fa:9f:a5:d4:75:c5:04:89:
63:b6:c3:15:64:48:8e:d8:4a:02:63:6b:04:4c:4e:1b:e2:aa:
f8:80:b6:47:d7:c7:ac:75:59:31:53:38:6d:da:e7:74:2f:4c:
a6:bd:de:27:03:38:39:db:3f:56:87:b6:85:ac:7e:2a:89:6d:
af:7d:a9:63:c1:f0:d7:54:d6:45:df:83:31:00:d8:0c:db:7c:
b2:4a:68:b3:fe:0f:18:46:5e:ce:4b:c8:4e:ee:b0:c5:a6:9b:
89:af:e6:08:29:94:00:b8:82:e8:12:a1:c6:7a:d5:e0:47:17:
45:49:56:b5:e8:70:03:bf:60:1e:c7:46:5a:93:bf:ff:2f:07:
6d:af:18:31:16:df:01:2b:58:f7:43:8b:e6:2e:35:f2:3d:92:
20:8d:10:49:8a:80:49:28:c5:78:30:3f:18:ee:38:a2:e4:f2:
f7:a7:8c:d5:74:00:72:9f:2f:ca:5b:be:95:17:48:94:7f:06:
7f:f5:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:34 2025 by rpki-client