Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: KyuwbbHuRfhoWFJEl/seZgTsCg/txYXn8ArN6otzjjU=
Subject key identifier: 34:45:08:42:5F:E4:8D:09:67:4F:E3:BF:73:1D:D9:6C:48:BA:E4:8D
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 0197B745B36B13A44B10D5078BB904EFB6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 131A
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: 6fbsxpn7wEp+rJANjOkIsPhDlPt4/kYwsTopZ0t1RUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b3:6b:13:a4:4b:10:d5:07:8b:b9:04:ef:b6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=344508425fe48d09674fe3bf731dd96c48bae48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:28:a3:1a:19:9f:1a:f6:fc:26:ce:b0:df:
c3:61:e6:72:b9:21:9f:47:f8:07:17:fc:d9:bf:ad:
a9:4d:63:1a:71:33:d3:bf:35:73:16:26:79:a4:26:
53:2a:c2:d1:53:8f:ef:fd:96:5c:b6:c5:1d:bd:e9:
29:ff:b3:32:06:bb:fc:d5:20:8f:64:07:58:fd:6d:
3c:a9:6b:9f:f5:fa:75:1d:c7:fb:b4:27:c6:ec:29:
28:5c:8e:7f:e1:be:c8:22:fa:a1:e8:76:fe:4e:ea:
6b:2d:bf:7e:2e:80:00:72:d0:b7:94:2d:1e:05:96:
10:33:46:c3:15:47:13:80:17:d6:61:2c:ec:bf:ce:
e9:84:fe:b3:91:08:5c:1e:a4:1b:af:37:24:28:24:
88:46:1a:44:1b:77:3f:e4:cb:10:a4:27:76:92:f4:
da:d5:4f:0e:0d:44:0d:ce:a4:da:55:72:b5:08:49:
6a:dc:bf:8e:4b:b1:63:39:3d:dc:5f:43:c8:c4:5a:
af:47:35:5a:d6:a2:ba:5b:b9:49:21:39:67:86:e6:
a8:2e:f2:47:ba:f6:ed:03:6f:d0:ae:64:90:34:3a:
0a:fa:c2:58:f9:59:b6:9d:a8:9f:24:5f:75:42:a0:
bf:bb:58:06:36:57:87:b0:96:f2:89:39:77:8c:9e:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:08:42:5F:E4:8D:09:67:4F:E3:BF:73:1D:D9:6C:48:BA:E4:8D
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:07:88:46:17:0e:f0:5d:88:32:e7:a9:e4:bd:10:59:ff:
95:94:67:94:ad:2e:90:3b:15:00:f6:ad:81:81:6f:fd:b4:ea:
7b:1e:52:f2:c0:0d:6a:e1:ba:47:b6:41:f4:0f:e9:5a:c8:97:
fd:30:e5:c6:03:f4:72:e6:0d:1d:86:69:85:2e:60:8d:55:e7:
41:d9:a0:e3:bd:9e:f4:8d:d7:c2:59:d9:b9:4c:63:df:68:e0:
2b:82:e6:a1:65:84:d6:05:4f:66:7b:28:ec:15:93:ed:ef:f2:
da:b1:10:b4:be:b0:cb:70:82:07:ac:ff:8f:7b:9f:91:0a:89:
ef:4c:6e:6e:e6:07:2b:3d:86:87:4f:a2:ed:23:5b:64:a2:74:
1e:c6:88:eb:d1:b8:4c:4e:5b:65:f0:40:9f:71:ec:e3:10:2f:
aa:c2:44:21:d8:5a:9c:0c:b6:57:33:07:9b:6f:5d:e1:a2:19:
d7:6b:90:5e:c0:22:bf:77:9d:c8:a8:c9:55:7f:41:84:03:c5:
d1:86:05:a2:ee:d8:bb:11:24:5a:d1:8b:71:c6:19:e9:da:c6:
a1:bd:09:b6:09:e4:e6:11:4f:bf:0b:72:d9:4c:dd:63:54:44:
26:f2:d8:f5:68:00:b6:dd:29:b4:e7:a4:58:f1:64:27:9b:05:
13:36:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:45 2025 by rpki-client