Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: USWn2QNrQQw1ZyNnfqWsHkdPx1guiTn4hNnODr6klOI=
Subject key identifier: 23:68:40:E7:AC:9C:D9:C7:FF:B3:85:1D:7A:50:8B:CA:94:DE:5F:2C
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 0197580080A9730826BBF5206539C2CF0573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 0873
Signing time: Tue 10 Jun 2025 04:01:57 +0000
Manifest this update: Tue 10 Jun 2025 04:01:57 +0000
Manifest next update: Wed 11 Jun 2025 04:01:57 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: yHBeX9PnfBP1KFULBLZMtsNsKFCSPz7t/WYKtjZxwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:80:a9:73:08:26:bb:f5:20:65:39:c2:cf:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Jun 10 04:01:57 2025 GMT
Not After : Jun 11 04:01:57 2025 GMT
Subject: CN=236840e7ac9cd9c7ffb3851d7a508bca94de5f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:d6:73:db:20:b6:41:b4:9c:1a:5d:40:96:
19:62:b0:cf:05:88:3b:af:b6:50:a8:34:f3:e8:26:
90:b9:bc:3d:a9:a0:e0:1b:fc:91:94:5f:fc:b6:0b:
a1:6d:d1:c8:c3:44:f1:51:0f:86:88:1f:79:fa:9f:
e6:5d:2a:b1:5e:31:d1:70:24:74:66:9f:2b:21:08:
6b:db:2b:8d:fd:df:de:04:55:a3:4b:d1:f8:99:80:
63:bd:7a:70:b8:06:3f:05:99:ca:84:d2:c4:2d:ac:
46:7e:73:35:37:17:36:00:3a:dd:1b:ce:1f:48:c4:
85:27:24:ec:36:11:a0:ae:e7:52:3f:ae:f7:4b:6d:
04:18:e6:88:35:f5:dd:f1:01:cc:a1:69:80:d7:8b:
93:25:ca:dc:fa:60:d8:a2:c1:6e:e3:85:49:60:44:
44:01:63:7b:40:1a:28:47:ad:d7:0f:03:e1:23:5c:
30:32:20:fd:d6:2a:5e:38:a8:c6:e6:be:c4:f5:2e:
42:db:17:b8:8c:76:db:e9:20:83:41:6e:6b:a7:8b:
33:f2:ec:9d:a5:a0:8e:a5:02:da:3d:5f:a3:d0:03:
9c:0c:90:f3:2c:01:f2:e1:9e:f8:92:d5:38:bd:38:
ee:fc:ad:6e:9a:8d:c8:42:24:d2:2b:fe:ea:df:07:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:40:E7:AC:9C:D9:C7:FF:B3:85:1D:7A:50:8B:CA:94:DE:5F:2C
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:88:f9:65:43:ac:8c:dc:f3:88:0a:2c:3b:75:40:e4:94:fe:
14:ed:59:f2:c1:db:9f:57:e7:36:3d:cf:7b:98:f5:01:18:6f:
1a:62:d9:46:34:0f:85:7f:af:2a:fa:17:90:c2:3a:d5:7e:ef:
be:09:a7:2e:74:91:44:43:35:b8:9c:41:ee:7b:a2:a5:b1:91:
e9:f8:54:80:2c:4a:06:63:a9:c8:d9:88:27:ef:d3:62:55:81:
4c:9d:9d:57:35:be:3d:2d:71:8c:19:29:9c:25:fd:07:47:fd:
d4:8b:14:43:96:83:10:f4:f3:df:ea:f3:54:2e:5c:25:86:01:
00:c2:2c:1b:3f:2b:22:a0:59:b0:07:0b:39:50:26:94:b6:17:
60:21:26:f4:b2:9d:15:ec:32:ea:f6:26:65:7b:17:f1:67:a8:
7a:b2:d9:36:da:e2:53:70:cc:09:9f:74:ca:e1:3f:0c:95:ed:
72:68:1d:62:d0:dd:a4:40:d6:66:a0:b9:85:b4:e3:5b:2b:d7:
d5:c1:9c:46:8d:3d:94:0d:75:29:02:8f:66:48:dc:7d:3d:2e:
d3:09:2f:e1:d4:c1:b1:7e:92:01:ce:92:98:cf:23:fd:12:62:
1a:75:75:27:23:3b:a6:17:a4:15:45:50:82:ce:40:22:da:c5:
20:55:76:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYAICpcwgmu/UgZTnCzwVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwNjEwMDQwMTU3WhcNMjUwNjExMDQwMTU3WjAzMTEwLwYDVQQD
EygyMzY4NDBlN2FjOWNkOWM3ZmZiMzg1MWQ3YTUwOGJjYTk0ZGU1ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcLWc9sgtkG0nBpdQJYZYrDPBYg7
r7ZQqDTz6CaQubw9qaDgG/yRlF/8tguhbdHIw0TxUQ+GiB95+p/mXSqxXjHRcCR0
Zp8rIQhr2yuN/d/eBFWjS9H4mYBjvXpwuAY/BZnKhNLELaxGfnM1Nxc2ADrdG84f
SMSFJyTsNhGgrudSP673S20EGOaINfXd8QHMoWmA14uTJcrc+mDYosFu44VJYERE
AWN7QBooR63XDwPhI1wwMiD91ipeOKjG5r7E9S5C2xe4jHbb6SCDQW5rp4sz8uyd
paCOpQLaPV+j0AOcDJDzLAHy4Z74ktU4vTju/K1umo3IQiTSK/7q3wcv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNoQOesnNnH/7OFHXpQi8qU3l8sMB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoj5ZUOs
jNzziAosO3VA5JT+FO1Z8sHbn1fnNj3Pe5j1ARhvGmLZRjQPhX+vKvoXkMI61X7v
vgmnLnSRREM1uJxB7nuipbGR6fhUgCxKBmOpyNmIJ+/TYlWBTJ2dVzW+PS1xjBkp
nCX9B0f91IsUQ5aDEPTz3+rzVC5cJYYBAMIsGz8rIqBZsAcLOVAmlLYXYCEm9LKd
Fewy6vYmZXsX8WeoerLZNtriU3DMCZ90yuE/DJXtcmgdYtDdpEDWZqC5hbTjWyvX
1cGcRo09lA11KQKPZkjcfT0u0wkv4dTBsX6SAc6SmM8j/RJiGnV1JyM7phekFUVQ
gs5AItrFIFV2WQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:33:17 2025 by rpki-client