Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: kee0yFksLZQ4II1ntsRW2HJxsf6nt8QLTpoR4xYbMX8=
Subject key identifier: 06:CD:A2:C7:2A:1E:CC:1D:86:72:D2:21:91:44:78:EB:9F:C4:EB:9E
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 01976D3E0DCD3A6EE00D3D12EDC5BA6D63BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 087E
Signing time: Sat 14 Jun 2025 07:01:12 +0000
Manifest this update: Sat 14 Jun 2025 07:01:12 +0000
Manifest next update: Sun 15 Jun 2025 07:01:12 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: J34D2qTHzuQYcrEWosy/77vy5CBfkChWRemEONCZz98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0d:cd:3a:6e:e0:0d:3d:12:ed:c5:ba:6d:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Jun 14 07:01:12 2025 GMT
Not After : Jun 15 07:01:12 2025 GMT
Subject: CN=06cda2c72a1ecc1d8672d221914478eb9fc4eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:85:ff:54:39:08:63:c2:56:9c:db:4c:da:
8a:67:04:e1:54:c0:2b:6b:3a:95:f5:34:92:8f:7d:
ae:02:9c:6c:7a:3e:7b:8c:9d:49:e3:0f:89:c5:00:
83:86:fd:65:a5:84:41:d7:9c:e1:2a:8b:d4:b2:a2:
75:c1:59:8c:e2:d5:7b:33:13:07:1a:b6:12:37:24:
85:ec:8d:ed:ba:13:3c:58:d1:a7:05:93:91:42:00:
e9:b1:0d:38:8c:ef:fd:e9:88:8d:b4:57:4d:8c:0d:
47:bc:a9:db:be:20:34:bf:6c:f6:a4:c8:8f:93:19:
e8:7d:63:62:27:12:db:e0:c3:51:2f:26:e0:87:83:
40:f7:93:6d:53:d8:80:f7:8f:d9:3f:bc:d3:a7:28:
66:db:ac:95:5d:69:00:a1:aa:d8:22:d1:ba:57:81:
39:ee:be:56:ba:0f:7e:ba:24:51:f7:7a:0e:61:ed:
39:49:33:a2:6e:40:26:51:13:8a:b1:45:f4:81:4c:
68:74:b1:4c:22:a3:92:aa:79:2c:be:f0:54:23:a9:
5b:29:f1:c4:2b:19:85:f9:6d:f6:5a:8a:4d:cf:e7:
06:02:57:d8:ae:0f:14:2c:5b:b4:f9:65:1e:40:60:
46:be:99:98:9d:c4:fb:f0:ca:41:0c:0c:a1:ba:5d:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:A2:C7:2A:1E:CC:1D:86:72:D2:21:91:44:78:EB:9F:C4:EB:9E
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:46:93:49:0a:66:48:47:7b:67:f5:d1:7a:87:2c:7e:b4:82:
b4:b6:ee:2a:c5:b9:93:0e:b4:39:01:e1:01:2f:54:0e:03:3e:
88:ac:6d:9a:c8:6f:39:48:df:71:7c:72:a1:e0:11:9e:ac:a6:
49:36:e7:22:07:9f:6d:16:8a:f2:ca:4f:97:18:b8:76:97:6e:
1d:63:ba:28:62:a6:4a:75:a2:0d:f5:2b:28:7b:00:30:c4:b4:
fc:e4:8c:d2:a1:72:47:1a:d5:8c:45:87:0b:e3:44:55:f3:19:
1e:ab:de:6b:57:5a:6e:e6:d0:7f:fc:b3:5d:18:f4:25:bc:4b:
90:cb:54:5e:80:e6:eb:40:97:d6:65:6c:ff:81:c7:71:36:a0:
91:1e:f2:72:4b:51:08:40:bd:6b:87:19:c5:dd:51:f6:13:94:
a8:cb:1c:5f:36:5d:ef:b1:10:05:ef:32:a0:ad:08:b7:18:ef:
40:64:c2:12:59:a0:55:ad:da:49:9a:90:56:32:65:01:7c:7e:
df:cb:af:b4:46:06:74:d3:09:ec:c8:5d:b9:86:8b:5a:37:c7:
35:c6:f6:77:08:36:e3:ea:80:59:6c:54:d6:1a:b3:f2:15:8e:
88:3f:41:cb:96:1f:ab:30:d0:10:7e:2c:4a:87:69:7a:0b:58:
dd:8f:3f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPg3NOm7gDT0S7cW6bWO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwNjE0MDcwMTEyWhcNMjUwNjE1MDcwMTEyWjAzMTEwLwYDVQQD
EygwNmNkYTJjNzJhMWVjYzFkODY3MmQyMjE5MTQ0NzhlYjlmYzRlYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2iF/1Q5CGPCVpzbTNqKZwThVMAr
azqV9TSSj32uApxsej57jJ1J4w+JxQCDhv1lpYRB15zhKovUsqJ1wVmM4tV7MxMH
GrYSNySF7I3tuhM8WNGnBZORQgDpsQ04jO/96YiNtFdNjA1HvKnbviA0v2z2pMiP
kxnofWNiJxLb4MNRLybgh4NA95NtU9iA94/ZP7zTpyhm26yVXWkAoarYItG6V4E5
7r5Wug9+uiRR93oOYe05STOibkAmUROKsUX0gUxodLFMIqOSqnksvvBUI6lbKfHE
KxmF+W32WopNz+cGAlfYrg8ULFu0+WUeQGBGvpmYncT78MpBDAyhul062QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbNoscqHswdhnLSIZFEeOufxOueMB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEaTSQpm
SEd7Z/XReocsfrSCtLbuKsW5kw60OQHhAS9UDgM+iKxtmshvOUjfcXxyoeARnqym
STbnIgefbRaK8spPlxi4dpduHWO6KGKmSnWiDfUrKHsAMMS0/OSM0qFyRxrVjEWH
C+NEVfMZHqvea1dabubQf/yzXRj0JbxLkMtUXoDm60CX1mVs/4HHcTagkR7ycktR
CEC9a4cZxd1R9hOUqMscXzZd77EQBe8yoK0ItxjvQGTCElmgVa3aSZqQVjJlAXx+
38uvtEYGdNMJ7MhduYaLWjfHNcb2dwg24+qAWWxU1hqz8hWOiD9By5YfqzDQEH4s
SodpegtY3Y8/8A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:24 2025 by rpki-client