
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: GVoJYtcUnzEjNhAJCdgoIERALv+gck2Jchz9p63Iq7M=
Subject key identifier: B1:70:C7:5F:F7:68:1E:64:3C:DB:A6:8C:0B:A1:88:E5:62:DB:39:4F
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 01974967A86C7C42CD0CE25A7C644E1F96FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 065E
Signing time: Sat 07 Jun 2025 08:00:19 +0000
Manifest this update: Sat 07 Jun 2025 08:00:19 +0000
Manifest next update: Sun 08 Jun 2025 08:00:19 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 3KXQTWWS6VZfC4InCOhB0hFuXeOb10GOy9Cn8XaZElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:a8:6c:7c:42:cd:0c:e2:5a:7c:64:4e:1f:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Jun 7 08:00:19 2025 GMT
Not After : Jun 8 08:00:19 2025 GMT
Subject: CN=b170c75ff7681e643cdba68c0ba188e562db394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:9a:fb:dc:3b:65:0d:1b:60:50:41:ac:3e:
80:24:0f:14:60:64:ff:a1:3f:af:6c:1c:ea:f3:2d:
1d:f0:9b:43:93:f8:58:a4:bc:00:8a:68:80:c3:9c:
8a:3d:26:a4:a8:47:72:1d:35:83:dc:56:ca:4b:95:
98:ce:62:e0:a6:77:0e:9b:10:f3:12:41:49:c3:08:
b0:12:52:35:70:6c:5e:8c:53:0c:ea:ee:5d:fe:1c:
f8:b6:71:14:22:bb:44:98:69:4e:96:73:c9:91:6a:
ed:ec:9e:5d:6e:82:a5:d4:ed:91:68:5d:a3:19:4f:
d5:c2:3f:ba:ed:6c:b2:7d:3c:00:04:e1:5d:7f:c3:
f4:ca:85:b8:b2:73:7f:79:d6:b3:51:d7:65:a7:24:
dc:38:2d:24:4f:a6:cd:47:c5:48:c5:7c:5b:6f:03:
66:f8:08:08:b7:79:13:56:2e:88:f5:09:25:1b:89:
8f:b9:e2:4f:7a:a9:d2:30:e2:f7:b2:f8:08:65:77:
ad:f5:62:74:0b:c9:39:b0:c6:1c:19:7e:d1:89:b1:
eb:76:54:08:dd:2a:bf:f6:ce:d0:8d:e9:7e:31:d1:
9b:79:cf:54:0d:b9:5d:b3:aa:41:ab:9c:0a:fd:7a:
ec:69:fb:09:d2:c7:a2:bf:7d:51:f9:c9:5a:e8:d0:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:C7:5F:F7:68:1E:64:3C:DB:A6:8C:0B:A1:88:E5:62:DB:39:4F
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:83:75:2e:6b:5f:b7:89:e8:bc:87:06:cd:56:a2:6b:90:0d:
ff:fe:09:4a:0f:7d:3b:14:67:29:8f:bb:21:3f:b7:75:1d:80:
0f:4f:78:63:57:ff:6c:d0:c0:be:f1:00:84:4b:78:a0:4b:f0:
ea:63:e5:df:22:24:42:b6:8e:de:59:44:4b:07:8e:3b:d1:fa:
ac:de:99:04:d6:ae:ff:52:46:2d:e8:be:8c:6f:53:91:c5:4d:
20:7e:1a:da:7e:9d:94:0e:61:48:86:af:85:72:46:fa:b2:43:
65:ca:b6:00:7a:19:f7:74:ce:54:fe:27:90:26:18:c8:4c:b9:
26:07:8e:18:0b:61:3f:75:61:65:0c:d7:f3:2f:08:8e:4e:77:
c2:35:1f:b4:25:ef:90:92:38:d7:51:5c:1e:52:4e:81:93:28:
a5:a3:c0:e4:d4:16:0d:04:b2:66:04:9d:b3:2e:ca:bc:6b:a2:
d0:aa:7d:b7:8a:d5:63:8b:cf:b2:ed:5e:26:e7:6c:6c:cb:7f:
39:ca:22:09:b7:c5:d3:a5:2e:6d:de:e7:2b:12:ae:c9:67:37:
5d:52:9c:62:cc:0e:98:5b:60:0b:32:a3:a8:5c:dd:39:76:30:
51:1f:7e:48:c2:81:d8:bd:0b:f0:0a:19:69:30:7e:17:c0:f5:
2e:ae:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:25 2025 by rpki-client