Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: r+ztA2tD0+iO1CSun///EaPiD3Wt7VYvpwfS8eSsadM=
Subject key identifier: E7:B9:0D:15:7D:69:D7:8F:8C:AC:C2:3B:38:E4:6A:BB:C9:29:54:AD
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 0197B70E5B766DF34667D4483693BCBC7CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 0A1F
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: YdAjlxfIR3hbBbeapNrXfRzW/RFV+cg3CZYMuH0CV+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5b:76:6d:f3:46:67:d4:48:36:93:bc:bc:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=e7b90d157d69d78f8cacc23b38e46abbc92954ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:92:05:87:6c:6b:08:51:5f:a8:50:50:ee:
fc:f2:fb:08:2f:39:d0:66:1c:51:1e:58:dc:d2:af:
74:01:58:b7:7a:90:9b:08:37:3a:2e:43:04:98:de:
4e:8d:45:7f:d4:6e:f3:89:93:d8:69:ff:64:87:2f:
e6:cd:88:b4:91:c3:9b:57:73:bb:6a:aa:df:72:1e:
4a:72:0b:b5:fe:22:07:a6:93:b3:1a:e8:4f:2e:d8:
18:13:85:63:c2:ac:80:6b:b5:f0:17:00:30:d6:21:
3e:17:59:e6:a7:65:09:a4:a3:d0:d1:99:c9:09:72:
8d:1d:f6:3c:fe:d6:69:ea:0b:8a:e5:8a:4b:4c:30:
43:83:d7:92:a5:c5:46:59:67:a7:ec:c1:0d:07:6a:
81:75:85:02:b5:99:ab:60:12:ef:1f:0f:85:e7:8c:
1a:f6:ae:ca:0c:0e:76:49:be:3b:76:04:de:41:5b:
22:83:84:7e:3e:93:2c:2b:7e:11:f0:27:5b:10:8f:
69:f6:e5:14:af:de:23:45:24:61:da:1b:d5:0c:ea:
0c:a7:8e:64:d8:7e:7d:2b:75:1c:e9:52:ba:c9:d3:
ee:aa:78:eb:35:ab:cd:18:f8:fd:19:4c:1c:f7:d9:
22:f7:7c:2f:11:ca:8d:46:db:81:64:6e:06:f7:a8:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:0D:15:7D:69:D7:8F:8C:AC:C2:3B:38:E4:6A:BB:C9:29:54:AD
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:a8:37:4e:df:d9:46:a8:62:b1:41:ef:bf:73:65:05:15:
e8:22:85:06:6c:dd:f9:33:d5:ff:f3:d4:6b:28:77:ea:e0:8e:
16:ac:90:63:03:56:0f:b8:59:08:b3:bc:5f:61:92:5a:fd:65:
30:42:bb:8a:49:90:51:60:bd:7e:02:4e:63:db:5f:ad:25:85:
1f:a3:00:f1:2f:74:cd:e8:5c:c6:c3:17:ae:39:4b:4d:19:ca:
33:28:62:e6:1f:2e:f6:1d:4f:d7:34:73:c2:02:6b:2f:b2:eb:
87:0b:6a:ea:0b:09:cd:eb:90:91:96:33:33:a1:a5:c8:c5:ec:
9a:c2:07:47:bd:43:95:e8:2f:94:4c:3a:e1:63:e4:dc:c9:36:
4a:d6:e3:30:e3:44:05:dc:e5:16:0b:99:31:7d:bb:3a:91:a5:
8f:99:2f:a8:a9:56:fd:ef:80:81:0c:66:7e:5a:a0:31:ad:44:
89:ed:3f:57:52:c4:05:c1:3a:41:66:0d:74:be:11:d6:06:21:
09:a3:96:d9:09:ac:92:a7:66:f6:e2:97:36:b5:5e:e5:21:1e:
88:8b:bf:48:4c:a1:b0:88:35:8e:2d:8c:03:a6:cb:68:43:96:
56:ff:3d:c4:d6:78:d1:21:1e:bc:01:68:5a:1d:b4:04:41:99:
26:6f:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:19 2025 by rpki-client