Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: uE0AYEUraxdtoA+XP2fXEdhvuIz2SWHpn1gjeGuq4hw=
Subject key identifier: 6D:B4:51:6B:00:CF:22:8B:9D:7A:9D:7B:C1:24:BA:F2:81:37:02:39
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0197B6D75FDF37C1AC6A14BE0EFBDD991B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0CAE
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: ZrvFwJToDuBRFOBPyEQQ3Y3ZA26vLMxbucrXC+jec2E=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5f:df:37:c1:ac:6a:14:be:0e:fb:dd:99:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=6db4516b00cf228b9d7a9d7bc124baf281370239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:5d:df:18:41:a0:7c:6c:8c:28:11:e7:e1:
ba:82:f6:e0:be:53:45:e5:71:c9:b1:39:01:6c:ca:
79:4e:2b:a0:c0:e6:0d:7f:38:02:90:ce:44:f1:d9:
a3:99:99:8a:c0:f0:f0:08:73:33:de:b7:22:90:f1:
ff:7c:45:7a:ac:26:70:90:53:6b:13:c8:57:29:aa:
2e:d9:07:5a:9c:9e:36:c0:82:59:a9:87:68:87:cf:
2f:cb:8e:ff:8b:69:08:06:7f:11:7f:f5:6b:5a:d5:
6a:f4:8a:30:ea:a5:72:6c:1d:64:9b:ef:b8:ce:f5:
dd:7b:55:56:53:93:ec:d0:d3:a9:79:48:8e:ca:3c:
47:b5:15:f0:ca:d4:3c:07:c1:97:dc:61:54:b5:e7:
55:dd:45:c5:30:fa:83:03:1b:1e:2f:d6:d7:1b:44:
2a:25:52:fa:59:c9:e3:b4:85:d8:81:aa:91:5b:8c:
a9:ae:55:8e:47:99:05:11:f7:bb:6b:dd:20:26:be:
1d:f7:c1:1b:4a:5b:5f:09:2e:47:a7:f6:08:2e:d7:
8d:5c:59:cf:a9:de:3b:5c:95:84:a3:47:c3:33:ca:
09:77:2e:df:c3:29:03:c4:3b:a7:da:d3:4f:fc:fb:
19:f3:b5:51:7c:9c:fe:f5:09:89:b1:eb:2f:de:38:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:51:6B:00:CF:22:8B:9D:7A:9D:7B:C1:24:BA:F2:81:37:02:39
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:40:e9:82:cb:b6:d0:15:d4:38:dc:4f:60:b5:b0:e8:db:
96:23:50:bf:f8:f6:bf:2e:64:f5:88:9f:3e:3d:83:19:d0:e6:
16:1f:6b:44:de:22:ee:a0:f4:fe:3e:17:2f:b8:a1:13:f4:47:
1a:67:c5:2b:3d:eb:0b:8d:c4:6d:95:29:fe:f6:bb:2d:91:59:
3e:57:e0:70:39:84:48:7a:fa:56:1b:4b:ea:2c:87:1e:03:9d:
f9:9d:e2:20:dd:e0:95:ff:3c:d5:4e:66:6c:4f:58:01:81:e9:
5b:e9:3d:b7:d8:c6:70:f2:f8:84:d7:b9:66:34:a8:1f:cf:62:
f5:23:62:19:70:e9:bb:df:b1:a7:ca:52:d3:fa:bc:5c:fd:1e:
9a:b0:01:7b:bc:44:58:90:59:b3:fc:69:92:6e:61:c7:07:ec:
a0:45:3b:66:d3:13:1c:f1:27:f8:51:a0:29:ea:e4:e6:51:44:
dc:01:9a:32:63:f3:dd:1b:d1:35:d9:49:e7:43:c6:58:4e:9f:
99:8a:b3:70:47:69:41:4e:a4:36:da:b4:67:0c:f7:85:0e:83:
0b:02:b9:b5:7b:76:b3:42:dd:93:c9:9e:8b:ec:50:a6:ab:34:
19:8f:a5:5f:0e:58:57:b1:b3:73:4e:28:fe:ce:3c:1f:cf:a6:
1a:2e:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:39 2025 by rpki-client