Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: 8efnBUjROzW3ZyIhcwKBgACFM5ZeuxNhp2uCXQI9mOc=
Subject key identifier: 56:4E:33:F2:F9:B6:3E:51:44:65:F2:13:40:12:1B:D4:8D:D0:16:69
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 01976BF4A17B2E0B92322C035E17C8FFA9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 1387
Signing time: Sat 14 Jun 2025 01:01:23 +0000
Manifest this update: Sat 14 Jun 2025 01:01:23 +0000
Manifest next update: Sun 15 Jun 2025 01:01:23 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: L/4oj9hkBanzHfkKocoM1X17Z2YgMWCoUmF5c/DD9tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a1:7b:2e:0b:92:32:2c:03:5e:17:c8:ff:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Jun 14 01:01:23 2025 GMT
Not After : Jun 15 01:01:23 2025 GMT
Subject: CN=564e33f2f9b63e514465f21340121bd48dd01669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:6b:e4:20:d1:74:82:fc:a3:26:68:a9:62:
2a:6a:88:df:04:7e:42:83:ca:00:b0:cf:8a:e1:ee:
c4:18:85:99:1b:6c:54:cc:26:20:39:24:52:6c:04:
cb:83:50:7e:7c:f2:ac:52:a3:86:b7:c3:33:f4:fb:
61:75:5f:81:56:eb:ac:4f:48:15:6f:eb:c6:fc:72:
e9:bb:32:ac:de:42:b7:8d:1f:e1:20:62:ee:8c:92:
55:8c:7d:6f:52:16:df:ed:29:3f:98:2e:18:75:31:
9e:ba:e7:eb:90:6f:ed:69:8f:11:be:66:fb:24:b1:
35:58:3b:f9:1c:b3:32:85:52:12:86:b9:80:27:0f:
35:58:f5:81:87:a6:92:2c:9f:da:f2:46:0b:c8:47:
0c:d2:13:b0:42:56:e1:0a:25:1e:f7:dc:f1:63:a6:
66:1d:af:56:1e:39:05:d5:17:d6:3d:01:aa:47:75:
13:2f:66:0b:d7:0c:bf:6f:a7:58:16:9e:5d:60:f0:
b4:21:ae:f1:53:f9:8f:20:62:7f:be:80:c0:eb:08:
3b:af:41:1d:c4:a5:b7:a6:26:ec:1a:7e:9e:a9:4b:
f0:d0:a0:54:b3:4a:01:9a:b5:6f:36:b0:62:4c:05:
25:5c:c5:a4:d8:00:f3:8b:81:a8:bc:fa:4b:7d:39:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:33:F2:F9:B6:3E:51:44:65:F2:13:40:12:1B:D4:8D:D0:16:69
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:d3:f2:08:8f:4e:6f:9a:b9:88:8f:60:59:8d:eb:4a:7f:
1f:95:10:28:d7:03:07:50:f9:56:06:b5:4b:10:95:40:c3:d2:
c2:dc:0f:91:3a:b5:bb:39:93:9f:09:13:59:8d:f1:9b:ba:b6:
0f:e3:81:45:9b:2d:b4:e1:d7:33:54:20:3f:54:26:9b:00:9d:
58:2f:26:7e:fb:55:83:38:e7:03:7d:02:89:37:a4:6f:07:40:
0e:b4:8c:57:5f:82:14:88:75:17:d8:4f:75:b0:3a:11:b4:7f:
e9:2f:21:97:14:57:cb:40:4b:9c:7f:b6:00:08:5f:d7:a4:9e:
9e:29:5f:ce:f6:50:a5:1f:e4:72:03:32:61:ca:15:bc:6a:3c:
a6:ea:12:79:60:af:32:b8:f9:b5:69:4c:f3:fb:aa:60:e5:4b:
69:2f:81:24:32:97:63:04:e9:72:34:f2:f2:30:0f:f2:3c:24:
df:fd:13:ea:6a:b3:74:b6:62:f6:d8:a3:23:83:9e:ad:17:80:
6c:9f:18:fb:02:58:28:83:4f:81:57:21:26:89:85:b0:34:60:
a9:e8:b3:d4:25:ed:7d:a3:78:86:3d:32:9a:9b:fd:c8:97:2b:
5d:32:77:4d:0b:cf:e4:b0:8f:4e:70:e8:5c:f3:7b:d0:b1:3e:
75:81:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:35 2025 by rpki-client