Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File: Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier: 3dzR43H4u/FKdj32zqzqVMimnuczor0By41rrQKgVmI=
Subject key identifier: D6:9B:1F:7E:13:52:07:17:35:E3:50:E8:EF:1A:A7:1B:E8:F8:35:8F
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial: 0197B70F198A57CEA0B70C70C227EBEB9897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number: 07F2
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: QJAWU3kF1Na7J2hxccvyPAwjVAZU0DeOBp+BYqsbt0A=)
2: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (hash: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:19:8a:57:ce:a0:b7:0c:70:c2:27:eb:eb:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=d69b1f7e1352071735e350e8ef1aa71be8f8358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:d2:9b:d4:8d:1b:26:4e:6b:d1:b8:8b:e2:
1d:05:64:4d:bb:b4:1a:fc:e6:c2:f3:1a:67:1a:28:
ba:9a:9a:05:57:dd:95:9e:5b:86:c9:1d:7f:9b:10:
86:c4:77:f9:31:45:30:18:59:87:f6:53:53:4a:7f:
00:9e:ff:52:52:15:b5:94:99:b5:81:33:a1:7b:50:
f7:0e:fe:f7:27:23:80:39:5f:b1:12:4d:18:68:46:
ee:9d:50:50:cb:1d:4a:16:1d:84:5a:ab:9e:6c:34:
7c:84:3c:c7:9b:70:7f:3d:6e:80:e8:df:16:3a:6f:
04:51:49:28:4e:17:82:ad:64:f9:11:37:66:a7:d3:
87:d3:b1:75:03:f6:bc:5b:da:09:3b:de:77:5a:83:
79:b7:5a:1e:78:8c:3f:0c:af:45:ac:93:8a:4f:e5:
c4:95:12:ca:83:2c:f4:0d:3b:22:ba:8f:a1:64:24:
72:fd:a1:a6:ab:bd:85:e0:75:6f:ed:a0:2a:c3:05:
0f:40:0a:e1:41:b0:fb:51:85:a2:2a:e8:2d:e4:b8:
62:a7:36:83:9f:38:af:a5:9a:7a:73:f3:a7:45:78:
80:87:98:36:5d:0d:ef:22:ab:7c:fb:65:41:ea:4a:
7a:4e:00:c2:59:ba:cd:c7:05:df:2a:e7:5e:60:16:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:1F:7E:13:52:07:17:35:E3:50:E8:EF:1A:A7:1B:E8:F8:35:8F
X509v3 Authority Key Identifier:
keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:68:d4:3d:15:0b:97:09:d0:99:b2:15:98:c1:79:51:fb:7d:
69:2d:bd:99:d5:ad:a2:f4:05:49:50:e6:9d:41:4b:e8:d8:72:
46:20:03:a0:95:04:4f:bc:8b:97:3d:19:a7:90:02:a1:bd:79:
0c:74:81:59:31:82:73:31:94:da:21:53:76:10:34:68:00:03:
96:5a:7b:61:e9:a7:06:6b:16:08:7e:42:36:73:16:56:ad:a1:
3b:a0:c7:6b:fc:97:cb:e1:6a:73:cd:48:54:33:9f:c4:55:a8:
7a:35:0b:24:cf:5d:ca:e9:2c:88:96:82:c7:66:cd:11:e8:a6:
56:1e:db:74:4a:52:53:7d:d6:6d:20:0a:07:d3:e2:f9:52:55:
16:1e:03:3c:3b:e2:e6:93:d8:44:8d:79:c0:36:31:2b:ea:73:
18:1c:41:ee:71:26:52:49:3b:c5:d2:57:03:87:58:88:5f:3c:
6b:be:d8:66:91:9b:32:a6:ca:0d:0b:d8:a0:2a:1a:03:a2:b2:
3d:bb:d3:96:7b:0a:f0:2b:27:f1:d2:b9:70:a2:66:b3:c8:5e:
fd:aa:69:7e:9b:88:a1:ab:a1:07:d8:97:93:b5:c1:59:8f:85:
2b:60:c8:44:28:aa:b4:74:98:fd:3d:b4:6e:8e:b7:10:4c:fd:
b4:0c:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:43 2025 by rpki-client