Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: 9U4/rbMVRg0aAJj+njiaWhoqfJ6o0TiIllJtQo5gPgI=
Subject key identifier: AA:C3:7B:76:B6:97:43:19:AF:FD:C1:84:22:EE:A9:99:B4:8C:D5:9E
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019749D62A768FA479A38200EDFE880EA7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0BD1
Signing time: Sat 07 Jun 2025 10:01:01 +0000
Manifest this update: Sat 07 Jun 2025 10:01:01 +0000
Manifest next update: Sun 08 Jun 2025 10:01:01 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: Wu4VjakHp6Uk4YW5DWP+3s1H9B/T7xrm3QpB8zBJJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:2a:76:8f:a4:79:a3:82:00:ed:fe:88:0e:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Jun 7 10:01:01 2025 GMT
Not After : Jun 8 10:01:01 2025 GMT
Subject: CN=aac37b76b6974319affdc18422eea999b48cd59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:c3:4e:7d:f6:21:63:da:28:d9:69:db:a3:
3d:7a:8e:70:ed:ce:28:a7:67:a3:0b:8e:0b:60:52:
78:a6:05:f1:ca:cd:da:fe:0e:27:70:f3:fd:66:3f:
ef:3c:21:12:ea:c9:42:a3:ba:11:c2:8d:fa:3e:08:
d5:57:4c:d8:39:4d:4b:72:96:c9:31:f2:9e:50:36:
48:16:68:3e:68:16:22:f9:02:62:1c:29:c0:16:34:
72:7c:e4:d2:68:11:87:a0:33:05:fe:81:0e:0e:52:
05:6d:28:de:44:cf:c8:df:09:d8:c0:c7:a5:b7:d7:
4e:d1:af:a8:a0:9f:84:06:47:73:74:1e:25:c9:1e:
c8:a6:8d:ce:c4:36:d1:44:d7:83:cf:65:da:9b:38:
90:d3:84:0f:99:a9:16:62:c5:5b:d5:e1:7e:f8:be:
ee:60:a6:de:01:5c:b4:f4:32:7b:38:6e:5b:46:2f:
58:24:3a:c1:5a:ed:90:d8:50:6b:8a:3b:fb:81:23:
9f:53:06:72:37:81:1b:c9:22:2b:72:57:39:73:bb:
41:d8:1d:fb:10:b7:8a:a1:a6:52:5e:2b:1a:9a:43:
5e:97:81:21:17:b4:73:c8:a1:16:1a:de:c1:a5:6f:
01:3e:b2:5c:c7:26:5d:e3:01:b6:3f:74:5a:c0:3b:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C3:7B:76:B6:97:43:19:AF:FD:C1:84:22:EE:A9:99:B4:8C:D5:9E
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:38:5b:70:c6:5a:98:52:9a:12:d9:c3:17:fb:e5:0c:3b:
7c:14:2e:67:2b:56:31:b9:a8:64:a2:f2:c7:76:fc:af:16:3e:
72:a7:30:a3:b3:7b:0a:71:ef:13:bd:b8:f3:56:31:51:33:e8:
db:66:3c:93:5e:40:e8:ea:2c:6a:2b:9f:c0:a4:d4:66:33:4a:
ed:f2:d8:e7:3d:79:c2:de:e5:c7:d9:13:62:86:04:99:9f:e3:
e0:f0:1b:d5:7e:8a:69:5a:2d:e0:2c:20:69:e6:68:35:7e:8f:
64:b1:0b:c4:04:c1:7a:cf:01:b0:22:fd:5a:56:fb:de:bc:01:
9a:29:37:3a:f5:9c:f5:78:77:1a:9e:12:1f:d2:76:d2:fc:7f:
20:81:27:2b:fe:b7:04:30:12:52:09:d1:4f:95:64:77:e0:d8:
b7:53:de:b2:ad:d3:38:45:62:72:ee:6b:06:6a:5e:9c:b4:8b:
00:cb:23:f7:88:5d:2e:a6:67:1b:4a:c7:98:07:1f:40:a6:44:
19:97:23:d0:c8:41:d8:99:8f:eb:8a:af:22:70:ba:de:93:09:
68:09:95:fb:02:d0:8b:70:b3:90:3e:cd:23:be:ce:96:20:8d:
17:87:a9:49:9b:64:9b:fc:e1:f3:e8:97:a2:88:ed:58:1a:07:
4c:6c:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:28 2025 by rpki-client