Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: WPF85FUpg4REIuyfyQ12Dpd5EagoHL/i+rEw+UtWa6U=
Subject key identifier: 06:1D:7E:6E:DE:5C:86:3D:C4:51:14:E7:40:53:13:87:94:8C:CE:CD
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0197BA7E0890989C1D5266A20BA633EECFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1287
Signing time: Sun 29 Jun 2025 07:01:51 +0000
Manifest this update: Sun 29 Jun 2025 07:01:51 +0000
Manifest next update: Mon 30 Jun 2025 07:01:51 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: evUJsEsxS6nxPGjGA9699ARda+oyhQxmiy2mDbRvNCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:08:90:98:9c:1d:52:66:a2:0b:a6:33:ee:cf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Jun 29 07:01:51 2025 GMT
Not After : Jun 30 07:01:51 2025 GMT
Subject: CN=061d7e6ede5c863dc45114e740531387948ccecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:70:f9:0e:15:5d:bf:22:ae:00:f4:0d:36:
96:25:80:ec:21:ce:08:eb:eb:a9:c5:5a:dc:be:08:
3b:5b:5b:1a:59:79:df:97:8b:69:91:c3:c7:7e:f1:
13:17:ce:12:fd:f6:c0:95:db:d3:33:bc:fe:1f:8f:
a4:d9:75:15:d9:e8:77:53:ea:11:f2:cc:8e:d8:fa:
12:db:83:84:79:a5:88:d5:25:8f:4e:f4:c5:c0:61:
97:fe:8f:c8:96:e9:1d:cc:1f:95:e1:23:60:d0:1d:
47:05:de:a9:22:c7:77:58:93:a1:7f:6b:f3:4a:94:
2f:be:ff:3e:6b:27:e6:d1:01:21:22:1a:13:f8:7d:
61:7d:13:db:c4:24:1e:c9:56:24:6f:a5:08:d2:f1:
91:b1:d4:15:df:67:c4:09:80:73:9b:81:2f:a6:c2:
0e:c3:34:b1:be:7a:f0:86:73:74:0f:03:0f:9a:5f:
4c:6d:66:24:2f:c4:67:90:b5:35:87:d8:b9:05:91:
8c:f2:73:75:92:41:a5:93:b2:66:af:43:02:4c:fd:
c4:5e:5e:91:e0:a4:0d:28:52:4e:ba:2c:99:de:14:
e6:3c:f3:8c:7a:6d:63:6e:e9:3e:ee:7d:d4:d8:cb:
40:9b:7c:32:5d:28:78:de:55:40:5a:62:0b:fb:1a:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:7E:6E:DE:5C:86:3D:C4:51:14:E7:40:53:13:87:94:8C:CE:CD
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:8d:71:58:ad:1d:d1:fa:07:37:c6:e3:32:ac:2c:8f:03:
29:9f:ae:b8:37:bf:e6:89:95:da:cb:41:0b:e3:95:0e:6d:db:
6a:d7:30:fe:04:31:42:e7:09:12:13:52:17:98:7e:b2:c8:b7:
77:8f:9d:ad:c2:f0:83:10:6f:97:6c:04:2b:83:44:4a:3b:f9:
55:79:8f:63:c7:44:fc:e1:dc:d5:7b:3b:de:b3:8c:35:b0:27:
61:8b:44:11:50:8f:87:ac:68:ba:3c:d0:9c:f6:54:dc:09:8b:
96:53:05:57:93:b1:b6:4a:7d:ab:61:a0:ab:dc:5f:62:a3:81:
62:8d:2c:99:f7:d8:3d:66:f5:8d:1c:98:7b:14:31:af:6a:f5:
d1:66:0f:94:34:69:21:cd:47:53:d7:f8:27:dc:65:a7:f4:27:
dc:98:f2:2e:0d:b5:30:ab:c8:ef:2a:62:aa:3a:64:c7:da:fb:
72:49:ce:af:17:1b:b2:0a:ea:1e:50:07:67:78:c1:bc:d9:ca:
17:a5:60:3f:46:5d:53:7b:ca:bf:db:4b:12:80:84:fa:ac:57:
e5:83:ec:5a:56:56:a7:b8:c8:d5:a6:a5:1b:ee:b5:75:0a:25:
3a:be:36:fd:36:ce:b9:32:5f:c0:74:aa:e0:e4:06:fc:fe:c4:
f5:0a:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:08:15 2025 by rpki-client