Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: JaLefVDYeQTG04smgEa5YP8ffkK7l/bYRA/TKcOm1pA=
Subject key identifier: 20:D0:34:47:DB:2F:D5:8C:52:EF:D6:E3:D1:1D:02:A0:00:40:BF:95
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 0197808E70573966BCBD40A56100E31768E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 0BF1
Signing time: Wed 18 Jun 2025 01:01:47 +0000
Manifest this update: Wed 18 Jun 2025 01:01:47 +0000
Manifest next update: Thu 19 Jun 2025 01:01:47 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: dsoIVP24pcbUxROijeloqkYgkMdOzqcRsm+9nPblyBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:70:57:39:66:bc:bd:40:a5:61:00:e3:17:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Jun 18 01:01:47 2025 GMT
Not After : Jun 19 01:01:47 2025 GMT
Subject: CN=20d03447db2fd58c52efd6e3d11d02a00040bf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:17:b6:22:cf:96:73:c2:63:36:b8:7b:e8:
66:a1:6e:e9:f1:25:37:7e:37:f5:86:30:e7:5b:9d:
64:08:8b:a3:69:81:a6:20:db:61:a8:cf:99:81:1d:
f3:38:8e:77:49:b0:e2:c5:89:a7:69:39:d3:8d:db:
93:2b:7c:e6:f1:0c:8c:98:9e:78:0e:20:15:df:8d:
ef:2f:e4:39:24:54:5b:82:83:cf:96:e6:42:9e:f9:
2e:db:96:fd:21:d5:d6:f3:9d:ce:40:97:85:72:e7:
04:68:44:08:76:f3:47:48:a3:fb:97:3c:1a:46:3b:
de:5f:e6:fc:52:34:1b:41:80:a7:00:77:e1:3d:56:
4c:85:5f:ea:9a:a7:95:75:3e:1e:55:ae:8d:40:8d:
ca:8f:12:5b:01:62:a2:c7:a8:cf:2d:9b:56:19:7f:
ef:2c:1f:d4:d9:89:80:98:87:d9:c2:cf:6c:fa:75:
71:72:cf:e3:3c:57:02:4b:6d:03:d9:ae:e7:4b:f6:
8e:3b:72:18:c5:3a:96:7d:ef:11:56:3d:f4:e5:f7:
28:04:df:05:2c:f9:89:a1:5f:de:65:44:4a:19:f6:
f5:f8:e9:77:36:97:ab:d8:aa:e0:5f:5e:bc:22:f9:
6b:d3:37:ab:dd:c3:f5:ab:3b:5e:d4:ad:93:ae:39:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:34:47:DB:2F:D5:8C:52:EF:D6:E3:D1:1D:02:A0:00:40:BF:95
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:42:5b:7f:9d:5d:c1:80:d3:ad:c0:48:0a:cf:ff:66:1e:
af:56:07:52:69:1f:72:48:f5:90:59:41:cf:a5:4d:43:ad:38:
15:76:0a:9a:d8:59:e7:05:42:df:01:d7:7a:35:56:e3:8a:e3:
23:5c:09:fc:e2:ed:2c:a0:d2:23:29:a2:ae:3a:f9:a5:da:1e:
38:46:bd:0e:2f:1b:07:5a:a7:23:bf:bd:45:23:bc:49:c0:eb:
3c:aa:61:bc:65:34:00:b5:f5:8a:dc:d7:5b:c7:86:9b:7a:d3:
2c:3d:f5:7a:6b:1e:ec:4d:fa:3e:4e:76:cb:df:f7:6b:24:6c:
34:6d:b2:a7:d2:d0:57:b8:98:3c:5f:7a:ef:a3:6b:36:b0:5c:
3c:bf:31:60:e3:03:9e:15:ec:66:95:a8:8e:b6:2c:2d:bf:0f:
de:d1:c4:0f:32:36:6e:b8:c7:83:0f:cf:7e:e2:d5:46:82:cf:
3f:8b:a8:ec:f5:d8:93:b4:5c:1d:ef:a1:91:90:f9:4f:fa:c8:
87:c1:3c:84:ad:00:67:85:0b:f3:fd:47:4c:34:d1:34:a6:cd:
5b:37:0e:94:56:61:2e:e3:35:58:26:47:94:da:a9:da:1a:5a:
cf:af:d5:3f:bb:e3:4f:be:b0:5e:93:a6:c2:ee:54:04:52:30:
33:c3:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:10:20 2025 by rpki-client