Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: a6KqJxbYCNC9hRqPYXz8JNmCFq3841Y7p7VbLaSc+jM=
Subject key identifier: B4:A0:1A:3E:BC:FD:1E:63:A6:C4:BA:16:DA:EC:8E:1F:C6:A1:FC:9E
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 0197C9F134037AC9AB4E87A68D595890206D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 06A8
Signing time: Wed 02 Jul 2025 07:01:57 +0000
Manifest this update: Wed 02 Jul 2025 07:01:57 +0000
Manifest next update: Thu 03 Jul 2025 07:01:57 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: mN7HeNfA8XS13qgyFJC2IXhFj7fdmm7HRDUppPY5U+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:34:03:7a:c9:ab:4e:87:a6:8d:59:58:90:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Jul 2 07:01:57 2025 GMT
Not After : Jul 3 07:01:57 2025 GMT
Subject: CN=b4a01a3ebcfd1e63a6c4ba16daec8e1fc6a1fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:d2:38:ab:42:84:93:53:65:b7:23:23:ab:
54:f7:2d:cf:65:75:ea:ed:f6:1d:e6:dd:5a:31:36:
dd:56:c7:1e:76:59:31:ed:86:e3:4f:bc:2f:49:f4:
af:26:13:39:d7:a6:f1:dd:98:3c:29:cc:47:62:56:
e7:d6:16:63:3e:0f:0a:8c:9c:02:63:5f:62:7c:35:
06:a1:e6:b6:83:21:f5:9e:63:f1:f9:bf:83:6e:0b:
b9:e4:d6:3e:0d:b8:9b:7a:fb:d2:f9:38:92:a3:b5:
c4:01:62:32:29:83:ac:7c:da:4c:da:aa:b5:7d:b5:
87:e3:a6:9f:39:0e:58:ff:6a:e8:cb:1b:42:aa:75:
57:56:06:56:34:33:16:69:f9:48:8c:dc:9f:c3:31:
3d:6b:10:1f:87:42:d8:0a:61:27:b9:bb:46:3a:5a:
8e:ec:11:b0:e6:50:8d:4e:68:62:cd:86:02:90:07:
75:c9:f3:0f:64:40:35:08:42:6e:59:8f:8b:3e:2f:
cc:7d:c4:92:58:4c:f3:4b:77:f3:8b:5a:03:2e:5f:
af:e6:f3:25:f1:63:1b:72:27:93:c8:66:c9:dd:0e:
fe:08:8d:e9:7d:60:21:a8:f7:7e:9d:a9:fc:99:b7:
6d:c1:42:ff:18:cb:92:e1:f0:67:20:ce:29:78:7a:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:1A:3E:BC:FD:1E:63:A6:C4:BA:16:DA:EC:8E:1F:C6:A1:FC:9E
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:fd:7a:6f:87:f7:24:90:df:56:78:d9:3e:d4:5b:07:1e:
e7:d9:f0:20:9e:c0:bf:35:18:df:15:b8:73:57:be:3b:38:3d:
2b:46:24:4b:10:89:48:dd:3c:9a:e1:2c:d3:12:57:2a:27:b5:
55:b7:6b:45:b2:41:e3:be:93:85:d9:d6:fd:9e:b6:f2:21:4b:
aa:29:e9:95:b3:f0:dc:9f:da:28:0c:37:fa:4a:56:2e:de:db:
64:1a:3b:ff:9e:e9:bc:44:59:26:1f:20:e0:bf:2c:4a:a9:94:
cc:1b:96:f9:74:74:ea:9e:90:d7:f3:92:c6:bb:dd:77:e5:37:
16:a9:f6:8f:48:f9:cc:ed:2c:7a:2a:ac:65:c0:10:3d:5f:ce:
86:64:8e:a3:b7:68:49:39:ed:e7:d5:08:37:64:c1:a0:dd:e5:
1f:64:1a:9c:05:e9:31:a5:0b:b6:03:20:8d:8f:96:da:e2:63:
fc:54:0a:44:6d:39:90:37:c2:db:e1:b4:8d:cd:b7:2c:c6:c2:
07:36:82:11:ef:2b:73:b7:37:c4:6b:f0:d6:e2:4a:cb:6e:a8:
7a:70:5d:30:5b:70:52:99:34:72:42:1d:13:a7:6b:fb:d9:1d:
a2:68:58:c8:33:e3:90:ad:8b:b2:5c:3b:d9:59:0f:36:dd:55:
66:c7:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:16:32 2025 by rpki-client