Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: dtGgBpsfDFD6MjOS4ZiB8LQtrwdqjzq/4pPJYOMkNC8=
Subject key identifier: A9:89:7B:41:2C:04:1C:34:1A:A1:D7:1B:99:D7:04:25:03:B5:FC:44
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 0197B6A177BCAA6883ED0E561126B4760A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0A9B
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: oTrCiBm1zrxoYStfLJhUBYngT819XUzFBIQ238twKxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:77:bc:aa:68:83:ed:0e:56:11:26:b4:76:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=a9897b412c041c341aa1d71b99d7042503b5fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:91:fe:c6:6a:58:ef:71:06:8c:19:f4:7c:
04:b0:12:e3:fd:7c:ce:e3:e8:55:20:3f:8f:1e:41:
46:62:d9:bf:86:92:01:a5:10:ea:e9:27:8a:79:5d:
7c:59:1a:5a:02:86:d0:7b:8b:60:29:de:bf:3f:05:
4c:3f:70:3b:7e:b7:46:37:d6:69:17:0b:97:06:4a:
41:d7:13:b5:b8:89:99:89:0b:18:22:87:3a:90:8b:
9e:f1:41:12:c9:e0:3b:2a:9a:4d:66:d0:3f:9a:d3:
f1:d5:90:ee:25:38:57:eb:b8:7d:8c:38:e2:e1:39:
22:ca:46:bf:c2:be:aa:9a:d6:c1:41:61:0a:d2:a1:
e6:29:07:ed:73:dc:20:22:fd:7d:dd:92:9e:31:cc:
61:95:c2:cb:97:89:f9:29:45:d0:e4:3d:c2:63:e1:
29:eb:d4:00:7e:03:bb:5e:c9:5e:65:1a:9e:55:c2:
69:0e:d6:9f:68:23:39:60:07:94:50:04:a7:66:46:
b2:5d:c9:d1:df:17:59:b3:fc:ca:98:23:0b:ea:ca:
dc:1b:c3:2c:c4:eb:68:af:c8:d5:80:b5:eb:2a:5b:
9c:ab:68:79:de:1b:4e:91:eb:d7:1f:86:61:f8:7d:
27:7c:c2:ab:9e:4d:23:0b:4a:4f:bb:05:83:54:5d:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:7B:41:2C:04:1C:34:1A:A1:D7:1B:99:D7:04:25:03:B5:FC:44
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:86:86:9f:cb:0b:50:b3:28:07:59:d7:a2:73:38:ca:96:c9:
70:62:96:5d:cd:eb:22:af:2d:9a:aa:d7:1c:1b:4e:03:3e:f2:
d1:76:47:15:66:ed:e5:f7:a1:0a:ff:42:15:6d:1a:51:21:1f:
af:35:8c:44:d1:86:3b:22:03:23:28:63:3e:f6:84:a2:dc:f9:
84:3b:0b:8a:bc:53:d8:f9:86:46:73:f7:c5:fa:be:0a:ed:e0:
3a:56:d2:1c:28:a3:cd:06:1e:93:be:92:3d:ef:09:df:d6:16:
7b:b9:5c:c4:c4:50:db:10:b8:fd:a0:35:3d:3a:04:cf:f8:3b:
75:98:6e:96:7a:0d:80:20:94:ca:1d:6f:b0:4d:4a:8d:53:0f:
5e:64:a7:11:4c:fe:6e:b8:f2:82:15:64:46:91:d9:20:5a:31:
80:28:58:85:d7:11:5c:34:01:f6:7c:6f:73:cf:8c:63:ce:94:
8e:bf:e7:52:78:f0:a2:08:c8:ba:42:93:87:ac:a2:1d:e6:5f:
7e:ca:a6:4c:a9:c1:66:3f:0c:53:ce:4d:09:f8:df:3c:a1:e4:
f1:25:3e:41:44:a0:eb:fd:3d:6e:5c:77:fb:12:e3:8c:0e:a9:
ed:05:8d:91:42:ce:db:06:50:f1:ac:a7:6b:83:b3:c6:89:36:
22:da:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client