Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier: NKL+66uKs87OtNhvVaDO75cdNka0vS2ekq8WdIUoYq4=
Subject key identifier: 89:E3:DF:EC:EF:17:4F:C0:1E:EB:1C:07:8E:94:98:2D:49:96:F7:F5
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial: 0197B6A0789D8BF00B072B591008A547D9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number: 06C6
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: bZ29VkW4VsJFz6fgz1iNtiFDMjKtXJVNamwi7aJEqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:78:9d:8b:f0:0b:07:2b:59:10:08:a5:47:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=89e3dfecef174fc01eeb1c078e94982d4996f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:07:57:ef:bb:5f:98:86:92:92:ba:6a:34:
c8:83:42:fe:44:1d:87:23:49:a9:8e:2b:e2:ad:4a:
91:6e:9f:12:6c:a8:65:2f:b4:b4:3f:70:ff:ce:d2:
f5:76:c0:6d:e2:1a:b8:14:a6:d6:d2:f5:66:7e:5d:
9d:05:04:70:5f:30:60:87:14:88:35:d7:7f:3d:a4:
c2:95:bb:b6:a8:4d:33:45:8a:c1:10:e3:d8:46:77:
44:f5:b6:f9:66:d4:7a:aa:d3:5b:33:6c:93:2b:d1:
c5:a3:11:8f:d5:0b:5f:63:07:95:c1:06:ea:4c:9a:
3a:b3:f8:f7:d6:9c:bc:e4:2c:15:cd:90:53:42:70:
31:1e:9e:8c:6f:68:85:69:35:7e:7b:b8:44:ea:89:
9f:05:df:fa:d0:16:c1:bd:ae:5c:1d:69:9b:54:56:
df:44:48:bb:e7:72:23:f8:4f:21:25:b3:0d:9d:99:
44:28:83:9f:0b:52:22:0f:0c:73:f4:d5:d0:ac:4f:
0f:95:00:eb:93:99:de:1f:3f:68:5a:ef:18:0a:b4:
28:be:43:7b:5e:12:92:8b:31:b8:ba:ca:aa:a7:25:
1c:10:8c:87:50:87:f7:cf:4c:78:17:25:17:25:0f:
58:f3:6c:25:d9:ab:7a:c9:a1:2d:67:0a:7d:9b:34:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:DF:EC:EF:17:4F:C0:1E:EB:1C:07:8E:94:98:2D:49:96:F7:F5
X509v3 Authority Key Identifier:
keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:29:ca:0b:10:4d:0f:c1:5e:4a:0a:9f:d0:03:12:10:1a:72:
4b:f1:bb:79:34:6b:48:c6:f3:22:4e:4b:44:40:80:d9:2d:43:
d0:e6:4a:74:76:31:24:4f:7c:92:85:a0:01:d6:f3:51:36:31:
0d:5b:60:eb:bc:6c:87:f9:1e:cf:fd:f0:da:c8:e2:92:7f:4f:
98:6b:35:3c:49:14:00:65:e7:d7:fa:c3:d0:f0:1e:50:1d:bf:
71:c6:b1:a0:db:ab:64:6b:bf:3f:b6:6f:3b:6d:fc:4c:c6:ee:
36:79:45:e5:a4:45:c5:60:ac:4e:40:6b:ff:aa:32:24:79:8d:
4d:c7:63:8b:e7:eb:f8:46:4d:ce:f9:e4:17:c7:08:2e:b7:63:
5d:7f:0a:b8:54:91:5f:02:92:13:0f:24:92:de:5a:4d:ec:6f:
57:52:b4:b3:09:56:3f:8d:45:ff:0a:a5:01:49:bc:f3:f9:c6:
e7:e8:44:ad:dc:93:bf:f1:84:da:8b:f0:a7:17:bd:f9:7c:56:
11:5e:e9:b4:8f:8a:e2:43:45:b5:07:7c:6a:d9:23:16:61:b8:
36:89:c6:aa:93:bd:ab:41:d3:df:65:a5:b6:00:bf:fc:25:53:
cd:38:e2:e6:5f:ea:3a:d0:d9:f2:7d:6b:6c:e2:31:0b:83:28:
3b:59:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:21 2025 by rpki-client