Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: xH3fwzNd4ef4Aw89zMvLSSF3tt587xgi/i+36qJEVIY=
Subject key identifier: 9D:B7:26:7F:CD:24:8C:44:9B:06:0C:C2:FA:90:8D:4A:C2:71:F2:86
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 0197677283DAE402B3B80236F17EBFEA874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 0BE4
Signing time: Fri 13 Jun 2025 04:00:47 +0000
Manifest this update: Fri 13 Jun 2025 04:00:47 +0000
Manifest next update: Sat 14 Jun 2025 04:00:47 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: hcQvLEZdevMFdDor68NYGtJmQ+AOQBjP9OZxIq+JAAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:83:da:e4:02:b3:b8:02:36:f1:7e:bf:ea:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Jun 13 04:00:47 2025 GMT
Not After : Jun 14 04:00:47 2025 GMT
Subject: CN=9db7267fcd248c449b060cc2fa908d4ac271f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:b5:d3:90:d2:67:6e:1d:ef:98:e2:28:3b:
77:42:f6:b9:6a:da:89:c1:7b:6f:d4:6d:a7:28:5a:
ac:5d:02:92:61:04:b9:a1:b6:34:ad:3c:86:8c:16:
97:9d:e4:7b:40:ae:78:81:43:04:eb:8d:48:53:f3:
eb:ce:41:92:94:8d:44:8c:b9:31:c9:f9:29:ba:77:
9e:8a:ad:ec:87:3c:2c:fa:8d:a0:f6:7a:54:98:89:
52:f3:20:78:a5:ab:20:ec:ce:1c:61:3f:84:81:4a:
4d:0b:5f:22:81:b0:58:4f:c3:0f:7a:3c:25:94:4f:
b1:e5:39:30:f7:92:3d:c0:79:0d:90:8d:f3:2c:0c:
db:36:0a:c6:ed:44:a7:ad:44:b1:6d:47:e2:37:6f:
93:b6:3d:bf:b0:80:0c:5f:7a:00:1c:97:8f:0a:9c:
4a:81:b6:89:dc:9b:d6:86:86:70:3c:3e:7d:7a:a4:
06:ea:f6:e9:2f:0c:8a:bc:e7:9a:1d:c1:46:f7:6d:
b5:4a:69:9e:a0:e4:3d:8a:87:5c:a6:d4:15:4b:9c:
a0:31:cf:63:1a:c0:47:d5:59:63:d4:66:19:1e:13:
58:91:3d:56:5a:e2:f6:e2:6d:d0:3e:12:b2:cc:b9:
97:24:ba:43:a4:44:45:bf:9d:6c:c8:43:db:ef:52:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:26:7F:CD:24:8C:44:9B:06:0C:C2:FA:90:8D:4A:C2:71:F2:86
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:8b:35:8b:df:fc:2b:9e:34:dd:01:20:75:b8:3f:98:fa:
62:ac:d8:b6:9d:e3:ab:f1:1d:cd:d6:f4:60:6e:2a:95:dc:46:
6c:90:44:a1:38:13:f2:9a:d7:05:1a:9f:4a:79:13:88:26:a1:
00:48:24:e0:f8:7b:b1:5c:f6:5f:54:32:1b:06:23:bf:f9:f7:
36:91:ae:b5:de:f5:2d:ac:b2:1c:f5:f8:e9:ad:ec:80:60:ac:
0b:89:ee:9f:21:d5:3a:0a:bd:23:19:19:a6:b8:23:40:d4:3c:
01:58:ce:45:1f:0a:93:ed:3e:29:ab:3d:b6:e4:b9:56:9e:b8:
e8:c3:50:ac:3b:f1:98:a1:8b:24:c6:e0:0b:0c:26:d7:95:84:
b8:53:42:b0:49:f3:54:2b:c5:d3:61:66:52:b1:3a:5a:05:93:
a2:59:92:10:f0:95:59:f4:52:2c:31:38:46:48:ec:46:58:47:
dd:5f:16:05:6e:f2:9e:74:5f:68:95:a4:c6:a8:5a:b2:c7:0b:
f0:fc:8a:42:89:97:00:8e:ad:1c:e9:77:18:de:e1:ad:2c:79:
da:b7:4e:d5:66:61:ee:fe:54:78:bd:d9:54:cc:66:e0:02:a2:
08:99:be:15:13:c5:6b:cb:23:7a:5d:e3:e3:1b:38:fc:aa:24:
57:17:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:47:25 2025 by rpki-client