Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: XGAN45cKZYFrSJZFJqcjfgC9oLkxPP/gD37ZaU1OVKE=
Subject key identifier: 45:68:87:FB:F0:CC:9A:3A:0E:B6:61:6C:EC:83:C3:2A:BF:21:FD:B1
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 01976DAB903840400CE85BCD327C7FCF7D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0932
Signing time: Sat 14 Jun 2025 09:00:49 +0000
Manifest this update: Sat 14 Jun 2025 09:00:49 +0000
Manifest next update: Sun 15 Jun 2025 09:00:49 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: BcxAsdn3O5+/zXoIxWFmCAb2Cd5gG61cC03X57Zb1s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:90:38:40:40:0c:e8:5b:cd:32:7c:7f:cf:7d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Jun 14 09:00:49 2025 GMT
Not After : Jun 15 09:00:49 2025 GMT
Subject: CN=456887fbf0cc9a3a0eb6616cec83c32abf21fdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:a3:17:ef:88:66:f6:a1:64:e0:ce:bb:ae:
2d:f4:8b:58:fb:ef:14:a5:7d:fa:b8:d4:3c:70:44:
fd:89:fe:3d:d5:6a:2f:da:85:bc:d5:a8:d1:7b:3c:
95:10:79:66:ef:2d:db:ca:55:ad:51:0e:9b:a5:7b:
76:bc:ce:29:f0:a8:66:3e:fd:32:ec:54:4c:4d:7e:
a7:04:58:61:50:a3:3f:db:98:f1:97:73:10:ea:0f:
b0:b1:b4:86:61:ae:75:01:33:2f:1a:13:9b:c4:e4:
da:6e:56:10:6a:00:00:c8:b0:44:42:8d:e6:b3:75:
8b:4e:82:6c:91:08:ce:c9:9d:06:c5:ae:03:b1:2f:
49:fd:9b:3e:25:04:23:e8:df:af:60:72:57:f4:92:
2e:d9:90:c7:9f:88:51:4f:e2:0b:8d:87:9e:88:8c:
77:39:9d:1a:c3:98:66:e7:42:8f:87:79:27:f3:08:
92:8f:59:bd:c0:fc:33:fb:da:0f:89:4c:3f:a8:e7:
03:22:44:0c:47:bb:f8:88:42:e9:e8:a2:03:b6:67:
35:90:7d:82:0e:07:71:0f:b0:0b:77:cb:7d:0e:bf:
af:e9:95:25:1c:a6:5a:7c:19:e3:cf:8a:49:0b:b3:
9d:69:88:c1:fe:10:92:9d:c7:b1:9f:8b:0e:03:41:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:87:FB:F0:CC:9A:3A:0E:B6:61:6C:EC:83:C3:2A:BF:21:FD:B1
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:59:51:08:f4:01:ef:a7:2a:c0:91:d2:60:89:62:cf:47:
20:39:df:3e:a8:1d:b0:95:cd:82:b4:4f:33:3a:17:ad:c3:e1:
23:52:55:c4:58:53:0f:1e:4c:41:91:88:69:ac:5e:6c:d1:ec:
35:db:67:e2:c2:5b:e6:b3:91:52:77:3a:0a:a8:f3:19:9f:f4:
9a:1c:04:bd:42:83:9c:98:42:7e:6a:e4:d2:dc:de:4a:56:b3:
55:04:ed:22:a0:1d:39:89:f7:f9:47:18:b8:31:89:36:46:c0:
b9:14:4e:74:97:77:48:1b:79:3f:7c:89:0c:ba:1c:1a:cf:b3:
7b:6e:48:41:b8:ed:21:9d:fa:38:6b:0b:be:69:cc:bb:60:81:
b6:1f:30:a6:b4:59:0d:03:92:0d:83:c7:33:cb:bb:61:51:cb:
e1:17:a5:36:1f:ee:74:1b:4f:34:12:32:78:4f:ea:fa:8a:23:
9f:14:85:6c:14:ee:2a:a3:7b:35:68:5c:76:8e:98:3e:a1:b4:
84:23:32:5b:dc:5a:09:48:63:39:c8:56:bf:7d:34:92:a8:79:
cb:f0:cd:2f:f0:15:db:1a:d1:a9:54:50:cd:b4:66:d0:40:8a:
07:64:de:2c:b0:a7:58:00:8a:f2:96:fa:9d:0f:bd:36:2f:31:
53:07:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:00:50 2025 by rpki-client