Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File: vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier: wzSdJLO2YgA7l5s/iVuwt/39eKtusZjZXsNNzXdu0R8=
Subject key identifier: 03:01:4D:B9:D3:8F:B1:9B:89:5B:89:AE:13:E6:D4:77:6B:4B:65:7F
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer: /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial: 01976EF526763FC3813D5D49D4170EF892C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 15:00:49 +0000
Manifest this update: Sat 14 Jun 2025 15:00:49 +0000
Manifest next update: Sun 15 Jun 2025 15:00:49 +0000
Files and hashes: 1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: zrvhauDlmCmoh/O8NUDcKWhPPIuPQGARlrFjaQDcVjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:26:76:3f:c3:81:3d:5d:49:d4:17:0e:f8:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
Validity
Not Before: Jun 14 15:00:49 2025 GMT
Not After : Jun 15 15:00:49 2025 GMT
Subject: CN=03014db9d38fb19b895b89ae13e6d4776b4b657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:a6:d2:44:33:6e:4c:7b:08:3c:44:3a:5a:
e2:67:5c:62:88:b4:82:12:4e:4b:dc:ad:01:73:f9:
8e:71:bc:59:dc:21:12:2e:fa:64:ee:cf:51:79:30:
55:b7:fa:c8:77:b2:1e:31:69:1f:7f:62:97:2c:ff:
bc:69:c9:29:6a:b9:f5:b3:ff:9d:60:87:5f:ab:04:
43:93:83:b5:73:a7:fe:7b:8a:8e:04:0d:a8:cb:f1:
56:d2:28:cd:17:a3:1a:d0:4a:37:09:9e:10:c9:02:
6f:ae:49:25:f3:63:7f:57:9c:d7:63:02:17:a8:b3:
54:e3:ec:70:74:ef:b2:a2:a4:54:25:0d:65:26:a4:
dc:01:0a:a3:d3:3f:af:c7:ac:a3:3f:00:85:69:55:
5e:bc:38:8c:4a:0f:b4:a6:b1:c2:f2:af:19:1a:e2:
d6:b8:8e:26:58:05:52:3d:c1:5a:8d:10:ae:30:46:
e8:15:9f:33:58:86:7f:c9:1b:f2:29:96:40:41:22:
bc:84:e6:39:ec:b8:4e:4a:ee:c8:c4:a5:70:26:9f:
f8:55:74:aa:db:53:f3:5d:07:f1:84:13:ba:4f:cd:
0a:f8:3f:95:cf:a6:18:eb:bf:4b:b4:8b:4d:a5:76:
fb:c5:42:2c:3e:4d:27:a0:47:00:b2:dc:4d:5d:26:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:4D:B9:D3:8F:B1:9B:89:5B:89:AE:13:E6:D4:77:6B:4B:65:7F
X509v3 Authority Key Identifier:
keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b7:e3:38:8a:77:7b:9b:04:11:02:45:6e:2a:d2:cb:eb:53:
73:ba:de:5b:3e:71:41:29:31:a5:a7:f3:34:a8:f8:b3:6c:05:
b3:5a:b0:15:b4:35:62:76:94:ba:ac:9f:60:d1:c1:a1:33:17:
ac:41:0b:7c:b0:80:f4:43:2d:16:d0:80:4f:4f:b9:66:2f:ca:
0e:d8:ef:02:64:f0:8b:e4:d8:4d:41:12:9e:7c:39:c8:19:dd:
d4:cb:a5:d6:a3:71:19:6e:93:97:7a:b8:3d:ad:8e:13:eb:ca:
fc:76:84:f2:c8:b2:a8:f5:a7:79:5c:c9:6e:35:85:bc:2d:b9:
6f:2e:16:83:d5:0e:22:72:1f:13:d4:4d:47:f1:b0:e3:19:eb:
cb:99:03:3d:53:e0:28:7c:b0:4f:fa:4f:ba:d0:45:c0:85:8a:
80:2c:48:68:95:6b:68:d3:65:fa:80:cb:af:f4:fd:1f:99:0f:
65:76:13:36:3a:ce:d1:03:70:03:a4:16:6d:85:ed:fa:8d:52:
58:66:3a:0c:ce:f0:1d:e7:69:d1:f8:b4:c2:9b:5f:66:07:24:
c0:3c:12:4c:c1:31:39:b2:cf:55:67:56:42:73:5d:11:0a:ed:
42:1c:b5:b7:16:0e:59:37:2c:35:e4:cb:05:47:e5:f9:50:8d:
82:83:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:33 2025 by rpki-client