Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier: Cpgbe3e1l0j9dV4GZYVqAQk3MvIWO6i8+bhIwj/6Gys=
Subject key identifier: D2:BC:52:23:D6:56:7C:01:B0:5F:A8:BF:46:3C:7A:1E:BD:FD:42:EA
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 0197B6A0D629C65BD61E2EAAB28056DB3218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number: 0AAB
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: /LhiCdrIjaD3fPWxjSmWcczTBTb+6brPT1ukWpjpk3o=)
2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d6:29:c6:5b:d6:1e:2e:aa:b2:80:56:db:32:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=d2bc5223d6567c01b05fa8bf463c7a1ebdfd42ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:06:98:9f:49:7e:03:55:d1:a3:28:9b:a5:
1b:33:ea:f4:3e:18:fb:76:33:bb:e5:27:fb:d8:0d:
ef:61:29:39:70:10:d1:c4:10:b0:93:7a:0a:0f:3f:
c9:98:36:23:81:e6:07:a7:6d:75:9f:b5:4b:f6:1d:
7b:ab:1c:2a:03:0c:a5:73:2a:67:d5:f5:7f:af:a3:
d5:cb:2f:d2:05:1a:d8:50:14:da:fa:d8:8b:f1:68:
11:32:9c:39:72:4b:cd:57:f2:22:96:28:8a:10:1b:
c5:0a:52:2e:51:e9:c3:16:ce:3a:b1:c7:b2:12:34:
c3:e7:69:71:61:b1:49:2b:30:d4:9a:b9:28:aa:a8:
eb:bc:7b:ad:59:7b:22:ff:8f:e9:f4:e3:2a:17:38:
71:34:7a:f8:39:eb:04:b1:bd:34:a1:89:68:00:6d:
c4:8d:a6:5a:5d:7c:a2:ab:14:e3:1f:37:dd:02:6a:
ef:1a:7b:a7:d5:7d:b0:29:0f:f0:86:c4:f3:d2:ba:
65:60:b4:31:b9:52:93:bc:a8:11:ef:1f:0e:47:ac:
5e:ff:01:33:54:62:ec:43:67:29:63:a8:71:8a:cf:
99:49:42:d6:a4:64:86:2f:9e:c2:26:71:63:d3:0d:
f2:5f:4c:7f:1c:c8:b2:23:d1:f9:48:00:6d:02:57:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:52:23:D6:56:7C:01:B0:5F:A8:BF:46:3C:7A:1E:BD:FD:42:EA
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:55:84:d0:34:6c:87:d5:dd:c7:fe:81:37:a5:69:f4:4b:
f2:7b:7a:58:9b:57:4b:32:36:60:00:00:21:18:18:4b:ff:ac:
85:43:a1:05:a3:97:36:cf:b3:0d:c0:2c:bc:76:da:22:54:f7:
72:91:e1:4f:54:fd:a4:91:17:23:86:46:69:87:3a:23:f5:b9:
83:24:86:38:bf:5a:84:fa:e0:6d:fc:f4:1b:8a:1d:af:63:65:
d2:55:e6:fb:5f:24:a5:66:37:4b:02:87:67:32:2e:b6:39:da:
78:00:0b:3a:5a:0d:53:cb:f7:b0:25:02:45:5f:c5:2e:88:a7:
21:e1:20:0d:b7:23:c4:9d:fc:c8:c2:13:7e:63:96:54:b1:34:
26:b0:ed:a3:fe:da:87:79:f7:aa:a8:68:6e:d7:d1:60:11:f3:
a2:41:ae:3b:20:27:a1:55:ed:ca:45:56:58:be:26:e5:2d:5a:
dc:20:64:c6:9f:9e:31:97:e6:6e:79:42:94:c0:07:8d:21:6e:
93:f8:57:3a:67:77:6e:35:95:9a:88:aa:bc:13:39:2a:b8:40:
5a:3e:fd:3b:6c:95:27:90:bd:e0:21:d2:e7:3f:79:dd:65:10:
a7:20:b1:c5:62:30:3a:59:82:5c:42:c7:ad:4c:a0:4c:4d:84:
89:27:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:49 2025 by rpki-client