
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
File: vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json)
Hash identifier: 5Zi//ipXaSro5w65xhYwpto4F2tnIUaXT3uvCAQdyG0=
Subject key identifier: D4:9D:EC:68:96:F9:31:D3:7C:CE:2C:24:EE:8D:29:23:49:AC:29:11
Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
Certificate issuer: /CN=bcf234c0444416b8852fb347878ad376d0818d64
Certificate serial: 0197CB3A713683F4F14E15595CB06A2FB07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
Manifest number: 094A
Signing time: Wed 02 Jul 2025 13:01:34 +0000
Manifest this update: Wed 02 Jul 2025 13:01:34 +0000
Manifest next update: Thu 03 Jul 2025 13:01:34 +0000
Files and hashes: 1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: ed+SKpkMujcIQYJMbfUmAp1BAOXaXgLa/rsgqUqXsaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:71:36:83:f4:f1:4e:15:59:5c:b0:6a:2f:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64
Validity
Not Before: Jul 2 13:01:34 2025 GMT
Not After : Jul 3 13:01:34 2025 GMT
Subject: CN=d49dec6896f931d37cce2c24ee8d292349ac2911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:97:f8:55:a5:82:f1:13:d8:9c:59:d5:71:
b8:14:5b:f3:56:53:ff:a7:d2:71:70:24:01:e3:a9:
98:f2:04:aa:04:f9:27:09:cb:8f:3d:65:1b:b2:13:
d9:3f:c0:b2:4c:ee:db:26:15:99:12:5f:0a:38:b9:
f0:4a:32:42:d0:ce:14:19:c6:f0:a1:a1:e3:e4:de:
ac:14:ed:75:23:fa:42:cd:e3:e4:5c:e3:54:ac:f6:
5b:87:58:1c:d2:e4:ec:80:ac:57:17:44:0e:e2:76:
2e:f4:c3:1d:53:3e:1f:ed:98:45:d7:de:79:9e:ba:
41:ce:6f:b8:fd:e0:b0:d2:1e:6f:5f:4e:4e:02:84:
f8:95:f3:c7:59:51:1a:a0:db:8f:a7:5e:c3:93:99:
48:ae:05:a0:5c:5e:84:c8:13:5e:39:f6:02:ba:17:
d2:a4:c6:c1:2f:60:23:76:77:e8:66:f8:54:db:3f:
a8:da:14:fd:1a:e0:ce:d9:d9:ae:2d:40:66:63:12:
00:d4:ab:a1:47:95:82:a3:f5:6d:41:7f:08:7e:c4:
b6:a7:ed:31:1b:60:6c:d8:cf:1c:e9:49:27:86:0a:
74:0b:59:c8:a6:ad:32:f5:94:f7:0c:ce:c8:20:6e:
52:01:4c:4b:19:04:a8:a6:31:6a:aa:68:72:07:12:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:EC:68:96:F9:31:D3:7C:CE:2C:24:EE:8D:29:23:49:AC:29:11
X509v3 Authority Key Identifier:
keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:62:00:ec:2f:f1:c5:9a:15:b0:2f:73:99:3d:d6:96:55:41:
f5:bf:e7:14:2e:78:39:dc:04:7e:8e:45:c1:f7:7f:a7:3b:53:
3f:63:8b:8e:a5:76:be:a5:73:a5:51:5c:8d:7d:f6:92:0c:44:
e1:b0:e6:2a:4a:6f:cd:fb:ff:12:ff:33:f3:07:dd:34:f5:d1:
f8:e3:30:0c:ee:59:60:c2:45:4c:44:ae:f4:02:ad:c1:47:46:
25:6a:0e:2e:aa:64:f2:e7:02:dd:44:a5:15:39:fa:33:bf:90:
62:f0:91:19:69:ae:45:31:08:e2:32:6d:6e:71:01:6d:ba:c2:
4f:5d:a3:e8:5b:75:87:d2:f5:64:16:2f:f3:98:1c:0a:0f:ae:
85:8e:64:b5:5d:33:34:bd:ed:8a:b6:ba:2b:e6:3b:b6:d9:36:
6f:f8:23:f3:ff:9a:69:79:1c:8f:50:cc:5d:f1:d5:ba:75:95:
62:dc:cf:c8:90:c9:b4:ed:01:73:bd:eb:62:14:9c:2f:47:e1:
f4:81:49:8a:90:fe:21:ff:c5:8c:47:e1:65:f6:76:63:78:1f:
b7:1b:94:70:09:19:fa:b5:3f:67:eb:65:df:0c:52:a0:a4:d1:
97:b1:c3:66:c9:b5:86:0b:3e:d3:8a:d9:18:ba:52:ce:b2:17:
f1:2c:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:26:15 2025 by rpki-client