
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: nfecyD7VvYtS3vihR6oUO8w4epoqAfBzGt58IL1BU1M=
Subject key identifier: 55:68:5B:60:9F:77:C3:9E:C3:A5:E8:64:51:33:E6:86:FE:74:21:34
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 0197488C815B2AFEE9D9AEF37F5AFF3556C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: 3ZX6GJB7imv73koiKgWjnPNrl4X03xKnFxLlbxKPWzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:81:5b:2a:fe:e9:d9:ae:f3:7f:5a:ff:35:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=55685b609f77c39ec3a5e8645133e686fe742134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:3d:84:53:8c:91:42:f9:86:17:c7:8c:ce:
31:c4:83:99:f6:aa:fd:2f:fb:2d:11:1a:06:a1:4f:
2e:85:77:83:26:3a:b6:78:a7:86:3b:04:bd:52:16:
da:84:19:a3:d6:2b:2f:8a:af:f4:b4:96:b8:3e:5f:
50:98:85:4d:32:81:20:d4:4f:6a:df:5a:0b:5f:d3:
1e:89:0f:a5:94:db:58:60:85:07:e1:25:a5:fb:86:
fa:37:bd:49:78:ed:3a:1a:e2:c0:f7:3e:82:1c:c8:
9e:99:73:13:71:83:2e:44:7d:79:e6:91:ec:34:c3:
cc:b0:81:27:72:34:10:a7:4d:9c:f8:e9:2e:39:3b:
5d:88:9d:4e:d2:63:15:57:26:4f:64:48:51:d9:73:
c0:a6:20:45:f8:34:4b:b8:c6:a3:9a:27:37:13:79:
1e:52:ab:5b:33:51:92:ff:32:79:0f:88:1a:c8:7d:
e5:b4:f6:84:34:38:40:6d:2a:6e:6f:5c:9f:45:28:
47:1f:65:17:33:11:db:e7:b7:2e:0c:59:b6:34:cb:
b9:eb:5f:97:e2:e0:e1:da:27:3d:eb:78:26:6c:d5:
9a:f4:be:15:9e:df:ea:cb:0c:42:79:ef:50:a3:d8:
bd:f3:4b:97:90:28:30:ea:82:90:af:51:36:5c:19:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:5B:60:9F:77:C3:9E:C3:A5:E8:64:51:33:E6:86:FE:74:21:34
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:89:0e:37:81:9f:4e:c4:33:fb:10:1a:36:b3:53:ac:1f:
24:72:bd:06:cf:47:2d:1a:13:c5:84:98:45:2d:08:57:2a:ba:
f3:fe:fe:c5:7e:b3:f4:fa:d4:93:1d:1c:04:01:45:00:f5:04:
4a:17:44:8b:5e:8d:f6:28:29:40:c3:99:c4:54:d3:7c:cb:8e:
be:42:65:da:c4:40:c5:d1:90:c5:56:2a:60:04:97:8e:f2:2a:
a0:c3:eb:99:1e:b0:48:63:a4:dc:08:48:53:52:08:0e:03:41:
44:81:16:fc:2c:a8:71:ec:9e:ee:5b:43:42:a7:14:e6:a0:b4:
12:65:77:30:7f:cb:43:c4:7b:b3:6e:d7:86:a5:3a:ff:fb:3e:
c8:ea:4b:27:93:30:77:ba:a4:89:5e:6e:65:7a:7f:13:3a:94:
be:e8:09:2f:c0:74:64:b7:3a:33:21:6f:3d:9a:59:df:94:3a:
fb:e1:bc:39:85:4c:ff:ae:d3:dc:86:ea:e1:8b:89:a8:98:33:
d4:a8:50:20:f6:6e:58:ed:54:b3:45:b9:c0:2f:9a:ef:0c:28:
f6:fc:48:23:49:30:cc:16:20:99:36:6f:d7:a1:9d:52:f1:38:
cc:54:5b:7e:ba:81:14:19:04:3e:bd:13:a3:60:c0:8e:cb:18:
4f:e1:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:37 2025 by rpki-client