Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: H3w+UWUMXbGiEEFNuUnWNJBN+gCCjGGnvDbm49eLz2M=
Subject key identifier: 1F:7F:63:90:81:89:34:54:AF:7F:7C:A0:DD:88:DC:B6:36:2A:DE:92
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0197B6A24DB4E9494FBA39B0B81C8EB84C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: 2+Njs3eRHt59X6HN9QPqkG3a+1gpJAEeeWwsgc6xYlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4d:b4:e9:49:4f:ba:39:b0:b8:1c:8e:b8:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=1f7f639081893454af7f7ca0dd88dcb6362ade92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:5b:6b:a9:d4:ee:67:2f:6f:f6:5e:a7:e6:
77:bc:8a:ed:44:d2:73:48:c9:10:ca:8e:bf:9c:9f:
2b:71:cf:83:da:a4:d5:0c:05:eb:af:67:29:f7:87:
6f:57:0c:81:1b:29:54:ee:43:89:12:54:d9:5f:f4:
98:77:f5:56:39:b9:17:7c:ac:1d:c2:3a:45:91:1c:
e1:e7:31:61:44:db:7c:56:7a:d5:a7:ba:7a:88:d7:
5a:16:11:04:1f:ac:3d:d0:85:ae:7d:7e:42:54:66:
93:49:6e:73:82:47:b6:4a:5d:d2:fd:b2:ae:8d:7b:
a1:66:f5:99:d1:68:65:bd:66:d3:1c:da:4a:7c:23:
18:93:d3:21:6a:f0:bd:14:fe:a7:5e:69:3e:96:de:
38:2f:d3:46:3e:0b:61:9f:32:66:33:b9:48:90:a0:
ce:48:3e:ae:a5:77:2b:02:36:81:22:63:73:4e:ee:
22:4a:1d:e3:cd:70:d8:ed:84:3d:5f:39:c2:c0:da:
91:d5:29:69:67:7e:45:e6:a0:a7:1e:e0:af:82:0d:
a0:f3:5d:c3:fd:87:cb:40:83:57:b0:4b:df:93:4c:
d1:4b:08:cf:e3:e5:56:af:97:84:2d:f3:bd:d3:f9:
65:cb:ae:cb:f3:e9:48:3f:87:b2:0c:6e:9b:c6:40:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:63:90:81:89:34:54:AF:7F:7C:A0:DD:88:DC:B6:36:2A:DE:92
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:28:bd:3c:0d:12:9d:19:19:cd:07:b6:d3:7d:e3:e5:93:
cc:17:ad:6f:de:58:bc:24:70:ed:c7:80:65:e5:88:a3:d5:fa:
fe:e8:4b:29:e0:06:4a:a8:a8:c4:84:01:68:9d:6a:28:1b:3e:
1c:dd:e7:f5:8d:79:7b:a7:bb:38:90:1c:28:10:98:3f:f0:28:
06:a8:6e:b3:ea:f7:87:72:85:05:df:eb:af:19:7d:c8:12:8b:
e9:59:51:8c:8b:8b:e6:02:7a:b8:7c:c6:15:54:e1:09:ed:2a:
de:50:06:ec:17:90:af:4a:8b:00:9e:95:e3:18:71:b7:43:5e:
5c:bf:b3:17:ee:5e:53:32:a4:85:03:eb:ce:ca:9e:41:57:35:
9f:03:8b:a0:e4:94:83:32:3e:19:3d:ca:a3:17:1a:2e:58:ea:
dc:25:df:5b:5c:b9:73:b4:05:37:a4:30:db:77:15:7d:0d:80:
61:3b:73:97:d0:f7:ce:cb:23:6a:4f:de:4d:97:8a:80:c1:4c:
3e:e0:e4:7d:dd:ea:98:46:c4:33:d5:15:b5:14:a5:74:e9:b1:
f5:65:1c:87:74:e4:cb:20:38:37:48:80:0d:78:99:ac:18:f5:
d1:aa:41:83:05:91:c0:e2:85:c8:3d:d7:fc:11:b9:ac:b8:8f:
35:a7:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:14 2025 by rpki-client