Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: rRJk8kWJsyj2mUHLek1sV5/tyHjjcMCFp7qvGdCWdA4=
Subject key identifier: D8:B4:14:E7:F1:2A:67:A2:31:0A:42:D2:E7:13:2E:04:78:2D:25:8B
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 01974DB2F06A6673554FF43AA6111304D1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 133A
Signing time: Sun 08 Jun 2025 04:01:01 +0000
Manifest this update: Sun 08 Jun 2025 04:01:01 +0000
Manifest next update: Mon 09 Jun 2025 04:01:01 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: CmlRhJ/nMDzDsQBmFmkmqJTwqJK5rMM+cjcB5PgVwcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:f0:6a:66:73:55:4f:f4:3a:a6:11:13:04:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Jun 8 04:01:01 2025 GMT
Not After : Jun 9 04:01:01 2025 GMT
Subject: CN=d8b414e7f12a67a2310a42d2e7132e04782d258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:57:10:c8:60:b0:8c:18:2c:1c:b7:fa:8c:
81:40:59:6a:3c:fb:da:0d:d1:f8:b0:e2:f8:e8:7a:
9d:d2:e6:48:27:e6:97:89:85:eb:0a:c8:9f:ce:4f:
2e:7b:97:4e:04:2c:9d:c4:18:da:cf:e9:09:7b:c7:
9e:9e:7f:13:53:5b:0c:c7:47:fe:7f:11:b8:c2:a6:
7e:1d:e6:5b:0a:bf:d8:57:76:80:cf:fa:6f:3f:aa:
8a:6b:55:3e:25:f8:d5:e1:6b:a4:7e:8d:fe:56:47:
e9:db:4e:8f:71:fa:20:40:d4:91:33:fa:cb:29:e8:
26:e6:07:9b:e9:d1:09:68:e1:db:1d:b2:41:9d:7a:
d1:e8:04:4f:7d:9a:5e:97:06:db:26:9c:03:74:bf:
d8:c6:a4:f7:7b:ed:ab:cc:09:80:db:8f:7d:88:dd:
7a:38:60:b2:62:57:e9:dd:68:d8:af:ff:00:a0:7e:
95:35:7e:24:3c:58:70:f5:1c:33:6c:13:a0:7c:fc:
01:f7:88:0e:9e:36:4e:ac:75:61:2c:b1:f4:0f:97:
1d:c8:6a:63:d5:91:e5:27:f0:94:da:3d:74:45:34:
06:2d:10:7c:7c:46:be:5e:e0:6f:61:04:06:06:fd:
9b:72:b4:fd:f2:89:3b:14:f8:7c:13:06:b1:06:0d:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B4:14:E7:F1:2A:67:A2:31:0A:42:D2:E7:13:2E:04:78:2D:25:8B
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:96:94:b1:e2:3c:e8:ec:68:27:7e:40:ad:6e:1b:c0:d5:3e:
4d:6d:d9:6e:8e:62:a7:64:be:c7:db:cf:d5:1a:b0:83:7e:39:
f4:5e:6d:9d:d2:7d:df:b4:63:39:71:09:36:48:8d:c0:7f:b7:
15:f5:61:5d:53:ca:b7:d5:19:37:47:84:e5:e6:cf:e7:5d:02:
f0:7b:97:17:9e:25:9e:36:cb:28:98:99:a6:1a:e0:01:d9:1c:
71:b5:06:a6:08:91:91:5c:98:aa:b8:29:d5:c8:8d:07:66:43:
e8:9b:d8:1f:80:2c:69:c1:a4:db:a5:e9:83:d1:c4:9c:68:58:
ea:c1:1e:26:05:49:f0:05:fc:11:55:63:6b:dc:b8:96:7c:ab:
b7:8f:01:bd:98:3a:16:55:5b:b0:40:4c:ce:98:8b:cf:b3:32:
fa:e3:61:95:d5:65:0e:35:c8:b7:b6:12:fa:7c:fa:04:4d:99:
e2:53:cf:7e:b4:7e:f4:03:9e:ea:4b:67:ae:ac:95:f8:56:16:
79:27:37:3d:1f:eb:8d:7c:b1:5f:11:97:1f:30:5b:73:1f:68:
4a:26:64:64:03:8c:f8:85:62:58:34:37:83:95:fa:c5:3a:cb:
31:40:e8:5b:94:8c:5f:6b:c6:1a:6f:ae:9b:d4:4d:99:fd:4e:
22:7f:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:39 2025 by rpki-client