Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: F3hESzJPX3MYvo4vWRmX5DbK3kZxWQZnGVo9bnQ/a8A=
Subject key identifier: 3A:36:94:FD:CA:38:7D:28:CB:8E:94:1F:DC:EA:75:03:1E:C7:B0:7F
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 0197B70EA98887466C3369F61678140F1357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: yO0ztWB3wAV5yVCyp0/pLmpILjhsNnjJqyphrXdlt30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:88:87:46:6c:33:69:f6:16:78:14:0f:13:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=3a3694fdca387d28cb8e941fdcea75031ec7b07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:34:fd:c4:54:89:a4:0b:70:ac:63:9f:57:
32:16:4b:ef:c6:3b:f6:c6:0a:e5:03:13:69:03:9f:
d7:90:34:25:79:b7:c1:16:0b:ba:92:c9:c1:f4:60:
d2:a4:70:17:b5:6c:1b:31:b1:0e:4f:a5:bb:17:b3:
3c:e8:5c:3b:4f:12:c4:ae:61:d9:63:68:c5:67:96:
73:96:f6:9b:75:c3:48:b0:4b:41:ea:73:fc:57:fc:
4f:18:8d:e3:24:a0:1e:cc:de:c0:98:fd:8e:4e:5a:
35:4c:2e:fc:bf:74:ca:a6:f2:93:31:cc:42:e4:fe:
7b:4b:0c:5a:6d:82:00:58:4b:2e:dd:bf:0a:6f:8b:
7f:ff:d2:0a:99:9b:fb:34:00:f9:57:e0:3e:c1:76:
c0:95:46:60:95:26:01:e3:96:4c:0e:d8:a1:84:d8:
e8:94:07:53:cb:20:60:cb:ae:85:19:35:13:5d:5f:
aa:fa:8f:5d:83:5d:49:59:16:4e:2c:08:62:a8:fa:
0b:d7:75:bc:be:05:37:e5:2b:16:98:34:b9:33:37:
13:a6:26:4e:88:9a:01:82:b2:df:b5:1e:16:f1:f4:
70:87:2e:d6:5c:e8:52:66:a7:cb:dd:df:0a:e0:d5:
27:55:8c:f3:5d:d3:6f:fa:38:d8:aa:dd:ef:cb:99:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:94:FD:CA:38:7D:28:CB:8E:94:1F:DC:EA:75:03:1E:C7:B0:7F
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d4:43:63:57:ac:77:86:2b:1c:e1:82:fd:a1:eb:83:b4:28:
c8:34:58:61:6f:a1:8e:58:8c:b4:8c:b3:62:d9:da:72:fa:8c:
e6:c6:7d:07:5e:79:10:3f:40:29:fa:62:07:3a:c2:e1:51:62:
ee:fd:99:19:81:ae:d5:f6:5c:27:9c:e1:cb:60:8d:c2:3e:c3:
22:9b:98:ca:56:0d:46:81:6d:3e:1b:1c:7c:01:2f:a4:98:7d:
aa:01:67:13:9d:64:e2:50:66:0c:f0:75:7d:c4:3d:e1:d3:ab:
46:ab:56:72:d4:5e:ff:ff:d8:75:21:78:40:1b:65:53:58:e4:
d1:44:46:19:dd:d0:85:ba:21:c3:24:e1:dc:be:39:27:e4:2e:
af:68:40:74:93:d7:c6:0a:ec:5a:1b:aa:e2:0a:0f:38:78:88:
1a:b0:33:1d:b2:c4:17:07:8a:cf:a8:7d:47:e8:da:a7:a1:07:
bb:65:ab:fe:3c:44:19:d5:83:b0:d5:dc:d6:4a:b3:10:1c:d7:
6e:01:b7:15:18:cc:1b:96:bf:7b:26:d2:7a:1f:75:36:56:a5:
4f:32:13:92:95:36:12:a1:ad:a1:96:e7:2d:18:22:35:a7:f3:
65:17:f9:5c:f4:2d:29:54:4c:bd:00:a2:0c:06:42:3e:ef:f6:
ad:67:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:00 2025 by rpki-client