Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: A6eb3srCZ2csGXIb19tbLlGxmMw8fGBTLSnTcPUqYLo=
Subject key identifier: F5:22:32:51:7C:B2:8D:AE:A8:04:C5:E4:4A:AC:89:A8:C8:31:51:FB
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0197B6D77136B81E37A375C5255044939259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 01A9
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: KigkO5kakCarBTlsvlXRS58uSFIBRM+pVEot3AhWd3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:71:36:b8:1e:37:a3:75:c5:25:50:44:93:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=f52232517cb28daea804c5e44aac89a8c83151fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:82:d9:a6:ed:5c:3e:3b:7d:56:8c:ee:54:
98:33:93:1b:a1:c4:cf:fd:cb:ce:b5:4e:69:17:04:
d4:95:00:70:52:0e:76:c4:c5:11:ba:f1:20:0a:19:
4d:51:27:59:1b:3c:52:23:e9:b0:4e:2e:0b:16:6d:
78:9a:df:c8:72:d5:b9:d2:44:c2:d1:9d:e6:78:e7:
6d:9b:45:9c:65:4c:87:7a:7e:1b:a4:04:62:3e:cd:
bc:9c:96:03:9b:11:f8:76:cc:31:47:7d:e2:3a:b2:
d9:a0:d4:a3:66:a8:90:3d:2f:36:90:fc:36:86:a1:
41:c7:ff:d3:8d:9d:ab:b9:9a:b3:f3:fa:3c:53:6a:
35:3d:65:33:72:51:37:1b:ea:d4:3a:78:1c:12:fa:
eb:8e:e3:7d:9b:ca:58:68:01:f1:bf:93:2b:ba:a4:
83:9e:a3:02:6f:fb:1c:8d:ba:ef:83:2f:24:b0:84:
96:3c:fc:d4:87:ec:4d:9c:5a:ea:a5:65:89:2e:8f:
fb:82:bb:19:95:85:ed:f8:ac:85:29:a7:e6:25:04:
a7:17:b4:cd:14:20:28:f7:f0:3a:bd:e0:42:f8:9f:
c5:32:61:42:41:48:08:cc:5b:da:56:55:b6:8f:6e:
e8:08:e0:1c:af:66:c0:cd:27:f0:f7:4a:5f:59:33:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:32:51:7C:B2:8D:AE:A8:04:C5:E4:4A:AC:89:A8:C8:31:51:FB
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:26:3d:15:91:6d:46:9a:1f:ed:67:24:fe:34:9a:85:1e:
7c:85:5e:9a:80:00:68:c6:6c:29:63:9c:6b:81:23:71:9c:a4:
6d:fb:72:f4:37:22:33:0c:9d:43:48:5f:d2:c8:db:bf:25:8d:
6e:2b:3d:6b:ef:fa:23:78:41:bb:04:b5:87:88:d9:95:7d:fb:
0c:be:a2:95:2d:18:a6:91:1a:d7:e3:ec:af:57:67:cd:ec:36:
86:ad:af:9d:31:64:29:be:ab:81:50:3c:51:6b:ba:a5:d1:71:
81:36:da:39:9d:07:5f:e3:ab:31:bd:ff:77:49:bb:f6:f6:5c:
0d:0d:fb:29:6d:b5:4e:a0:b5:cf:49:7a:29:e9:be:74:1a:76:
58:ca:4a:78:c1:d0:ea:bf:be:73:db:b9:1d:f8:a7:c3:79:a3:
7f:01:a1:0c:e2:b2:9e:91:6b:d7:0d:2e:a0:fd:ee:77:f9:ad:
c3:11:58:37:cb:48:04:91:87:41:61:38:8d:f9:49:38:66:0c:
c1:af:1e:e8:04:b7:a2:2c:dd:37:4d:bc:f7:17:d2:c6:93:5a:
10:91:33:a3:ea:ac:03:a0:f6:eb:bb:56:99:41:6f:b9:70:02:
50:55:a8:4b:97:44:c3:b9:1c:13:25:75:68:85:b2:41:53:f4:
f1:77:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:33 2025 by rpki-client