Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: 7IrP9e9bln9jymkOujs8I56UH/biD97Slro0SSPcADM=
Subject key identifier: 1C:B4:87:86:58:1A:EB:44:53:64:73:9A:6B:FB:5F:01:DA:75:D8:C0
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 0197B7B344289EBC8CA607D90470CE9A17A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 0411
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: Psk+fa0L+s4ZQNfBD1/plojBs6T2I2xUDuH0BJK3DHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:44:28:9e:bc:8c:a6:07:d9:04:70:ce:9a:17:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=1cb48786581aeb445364739a6bfb5f01da75d8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:c7:de:21:1b:bd:4b:c5:b4:96:09:40:df:
9a:b2:79:38:5a:1a:c8:56:af:e7:57:e0:5a:f2:37:
6c:2d:5c:b9:f6:a8:c9:51:69:d3:7e:15:f4:55:49:
5f:82:98:99:03:4b:f3:39:0b:3c:01:b9:6f:64:9d:
9c:51:3b:c7:7f:8a:4a:1a:31:d9:bf:a9:2f:b1:a5:
5f:aa:f0:42:4a:29:d4:2c:11:8f:0d:75:27:5d:22:
f0:a7:17:3f:bb:df:c1:1b:bd:e9:31:c4:4d:c1:62:
da:22:80:d6:c3:64:35:25:d2:b3:0d:52:16:2d:11:
46:29:82:5f:4c:38:d8:b2:c5:7c:00:a3:f7:ce:24:
10:5f:38:77:3c:28:6c:19:7d:63:41:fc:51:3c:66:
a6:3c:5c:f7:c1:ec:d2:3f:9f:fc:89:00:63:da:62:
f8:0c:19:ae:7b:c4:39:40:c2:7b:3b:e6:9b:d0:1a:
cc:af:98:f3:18:db:b7:87:e1:33:c6:ee:ec:35:95:
d6:3d:42:62:15:0d:63:6b:f9:fc:01:11:50:e8:bc:
37:00:dc:c6:b1:30:62:94:86:2c:da:e2:b0:67:58:
83:e4:ae:1d:48:08:39:c9:6c:62:4b:47:7e:c0:c5:
9f:ab:fb:7f:10:b2:b2:f7:41:a9:62:dc:44:72:a4:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:87:86:58:1A:EB:44:53:64:73:9A:6B:FB:5F:01:DA:75:D8:C0
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4f:f2:60:31:f3:be:be:4f:9b:97:a1:b8:ff:8f:4f:87:ba:
1d:3e:6e:9d:57:f2:9a:4f:fe:4d:b7:2c:d3:22:d5:6a:81:5f:
ba:05:20:94:04:b3:cf:a7:9e:d0:1b:89:69:c5:16:c4:7f:d7:
40:54:51:2f:c6:a3:ec:45:27:2e:49:18:5c:7e:1b:a0:21:80:
89:5f:47:2d:f9:58:4b:e3:ce:9a:c3:45:88:92:27:b1:0b:c7:
8d:c8:6b:46:8c:ed:37:82:12:8f:87:ce:71:5f:4e:5e:e1:b4:
f8:e0:98:e8:00:01:25:bb:0d:11:39:38:32:a6:0f:f3:ed:70:
5b:49:9e:44:6d:5f:50:47:0b:38:34:2c:c2:c1:7c:5b:6d:f8:
ae:37:e2:86:3f:7f:5c:6d:a0:6d:48:31:e5:64:44:e3:6e:ae:
05:9f:74:eb:bf:23:de:19:6a:44:da:de:dd:8e:94:3f:e2:51:
18:04:ae:c8:1d:04:01:c0:5d:90:84:ac:58:d7:e1:95:83:96:
55:0d:7f:a5:41:05:d7:97:20:f4:6b:14:53:94:ca:e9:dc:18:
71:35:99:10:da:fb:06:b7:62:83:2c:ca:90:ed:37:99:70:2b:
22:a5:df:0a:59:ae:92:d5:01:c7:da:42:ec:30:9e:2e:18:07:
cb:5d:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:35 2025 by rpki-client