Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
File: vtJXlaaCsRmplIBal2V4U9dUoFw.mft (raw, json)
Hash identifier: nF3ra7nEUSGBEUWU2+4nlegGUCdqJI2PE2lYvj7kfoA=
Subject key identifier: 4B:95:D9:57:AB:E1:62:68:12:CC:15:E1:6C:72:C8:AE:2B:65:9E:08
Authority key identifier: BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
Certificate issuer: /CN=bed25795a682b119a994805a97657853d754a05c
Certificate serial: 0197B70E8A53D9AA2546BDA13E2DA4C80AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
Manifest number: 0A43
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: vtJXlaaCsRmplIBal2V4U9dUoFw.crl (hash: mVJu/63l06ziLhEMsefmcwn2LwAy+/qkUKnyPdxs7kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:53:d9:aa:25:46:bd:a1:3e:2d:a4:c8:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bed25795a682b119a994805a97657853d754a05c
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=4b95d957abe1626812cc15e16c72c8ae2b659e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:26:fd:7e:2c:4a:40:28:d8:d3:66:e3:d5:
78:1c:c5:d5:16:12:da:87:4a:a5:75:03:db:3f:ea:
ad:41:f3:2d:92:61:e8:85:e5:37:60:0b:b1:e2:4b:
1b:1d:a3:e7:78:4e:68:aa:3c:e1:17:24:23:7f:73:
bb:53:57:7e:36:ff:9f:aa:65:ae:66:a3:5f:55:e8:
a1:ed:ab:f5:bb:8a:65:44:f0:d6:5e:50:48:76:16:
3a:93:51:a1:5c:3a:c1:44:59:a3:0d:9e:71:7a:c5:
56:df:f6:7a:53:db:6f:0f:67:50:1d:a3:64:10:21:
75:c7:67:88:48:b2:85:aa:c6:a9:e7:b0:fc:9c:ee:
12:2f:9b:64:20:a0:f6:af:51:5b:9f:24:3c:17:80:
b1:3b:55:06:66:c9:96:4f:b1:79:21:cc:45:73:95:
d4:f5:a7:cf:ff:2b:75:0c:64:70:80:67:ca:5a:b9:
c8:8e:0d:68:b6:c6:18:fe:a0:f7:bb:6f:8c:1e:52:
d8:c3:e2:63:a8:0d:03:99:a9:78:cd:b5:ad:43:32:
80:bc:f2:2d:de:b7:17:1f:6b:81:91:2d:21:f7:09:
12:67:a3:d5:ac:16:60:5b:98:e4:d6:d5:9c:ee:23:
35:00:c2:41:9d:be:9e:73:2e:70:50:07:74:ef:a0:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:D9:57:AB:E1:62:68:12:CC:15:E1:6C:72:C8:AE:2B:65:9E:08
X509v3 Authority Key Identifier:
keyid:BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a3:7b:a5:12:1b:9c:ab:54:25:71:61:97:f0:6a:22:fb:10:
28:fe:8c:3b:77:95:87:c4:42:c6:ee:ba:b0:b0:4d:8d:82:b9:
93:9a:e2:e9:14:5d:0f:b9:76:b0:f1:72:35:f2:2f:f6:b0:4a:
96:ef:62:be:e3:9e:b6:95:b7:f2:eb:b0:bc:ff:ff:f6:b8:7e:
a4:f0:84:ab:8d:15:0f:e3:ad:6f:e4:1c:e2:bf:e9:a9:94:ef:
d7:a0:75:50:f2:df:eb:e3:80:9f:d8:cd:7e:c3:36:d3:74:7a:
6b:b4:5c:91:d3:68:66:c6:e9:f7:fa:fb:f2:0d:c1:ae:de:25:
84:8f:24:06:e4:8c:9f:bd:ec:c7:a8:2e:b9:c8:61:91:88:c1:
58:c7:6c:67:b6:29:75:43:e2:2e:15:e2:a5:60:27:b4:84:6b:
36:06:10:a8:3a:fe:2c:ba:22:1f:b9:b4:0c:03:fa:a1:10:e5:
23:2f:d4:d3:09:4b:30:e3:8b:3d:b7:2f:d6:ed:e0:57:cd:f0:
47:f1:b1:d5:25:cf:9a:5f:2f:cb:87:f4:ef:77:62:c2:c6:b5:
97:2b:a7:e4:61:70:27:d5:53:be:73:b6:be:12:8e:db:16:54:
c0:9e:2b:d1:c5:89:3c:3c:df:fc:26:71:1e:2c:d9:ef:a8:bd:
ee:fd:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:03 2025 by rpki-client