Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: Uahz/0HJ/N30N5vXE5Gn3tzE1gziHpcMud5Zr2YqTkA=
Subject key identifier: F5:3E:FE:23:FA:90:7A:77:3A:32:CB:3F:F7:A7:64:0F:4A:FF:EE:F7
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 01976C99157467C0538C85C9EAC0E7B90160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0BE3
Signing time: Sat 14 Jun 2025 04:01:01 +0000
Manifest this update: Sat 14 Jun 2025 04:01:01 +0000
Manifest next update: Sun 15 Jun 2025 04:01:01 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: aj7FtM5+w2HzFgjCVOmPU0lruLU6sQ7XXdzKbTIJ3R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:15:74:67:c0:53:8c:85:c9:ea:c0:e7:b9:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Jun 14 04:01:01 2025 GMT
Not After : Jun 15 04:01:01 2025 GMT
Subject: CN=f53efe23fa907a773a32cb3ff7a7640f4affeef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:df:47:6b:b2:93:00:da:c9:49:08:22:29:
7e:6f:2b:c3:2c:f9:fa:5f:eb:eb:80:3b:a1:38:c3:
a5:cc:5a:a5:9a:4c:b7:5e:31:6f:70:d9:f3:03:f4:
52:e2:e5:39:89:d5:f4:d6:ff:59:27:6f:52:f7:91:
89:98:3b:b4:f3:57:ff:27:d0:08:d6:d2:15:9d:cc:
6e:b5:63:28:d0:76:34:dd:71:45:51:29:f9:6a:34:
1f:b7:b6:67:dd:0a:36:e2:68:e1:ed:5f:2f:e8:6d:
86:9a:9f:61:95:ba:ed:30:26:13:1d:37:ea:eb:ab:
e1:30:ac:4f:0f:35:b8:b5:33:c0:47:2f:42:db:2b:
00:c3:5a:81:51:fb:5b:0c:a0:40:cb:c5:6e:af:8a:
72:91:95:dc:41:7a:40:47:b1:2a:fe:05:a6:ce:62:
f3:64:ca:b3:d7:61:fb:c8:56:4c:2f:7f:6b:b9:15:
58:9e:3b:a3:ce:55:68:50:10:28:cb:26:ab:89:05:
0e:9b:4c:cf:30:a3:11:71:e1:d6:d5:88:5e:d2:ee:
de:d6:6b:64:b8:97:42:42:30:ea:03:fb:58:f7:4f:
72:34:43:07:f1:92:59:09:46:1e:31:76:d4:5a:99:
8d:cd:cd:45:70:f9:d5:a4:ab:a2:e3:ed:26:00:a5:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:FE:23:FA:90:7A:77:3A:32:CB:3F:F7:A7:64:0F:4A:FF:EE:F7
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:3b:a0:cc:c6:2c:82:44:7a:de:d1:2b:96:a5:2e:36:00:
00:82:ea:72:c3:30:20:73:35:16:e9:7d:a6:6f:6e:9a:34:e8:
30:05:bc:72:29:2a:86:38:fe:2e:24:ab:2f:dc:a8:b3:19:73:
7c:48:5c:5c:2a:93:d4:d6:bf:aa:44:8b:77:a5:78:c9:b4:88:
b5:e8:99:11:0e:ae:fa:68:1a:96:c1:28:53:e1:6c:ac:fc:9d:
cb:a1:8b:de:07:68:cf:ae:a0:03:c0:fb:50:4d:62:5e:a3:67:
f1:81:45:4c:22:4a:7e:a9:14:56:d1:87:41:3e:a4:02:18:f1:
ed:4c:e1:df:2e:b0:27:06:fb:93:62:3b:ef:35:92:38:32:b9:
12:ae:51:10:42:7a:12:fb:e1:b6:d1:c1:10:f6:6b:d5:d7:8b:
d5:06:57:11:ff:bf:43:27:08:34:57:0b:26:73:fc:8b:14:31:
5e:f3:04:fc:96:02:6e:a9:63:bd:98:dd:66:97:d5:3a:e4:d6:
15:39:cc:c7:cf:85:90:fb:83:7c:86:1f:44:f2:64:9f:77:da:
d6:0d:08:70:0b:8c:cf:0e:ce:09:c5:6b:9e:76:6f:69:0c:c2:
15:0e:7e:53:b6:25:f4:ca:6b:c4:a5:80:20:7a:63:59:77:02:
a7:eb:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:04 2025 by rpki-client