Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier: Jctrwytjf2hiKkKSbcLshgpPvrsf4AS039BBwahZ+E8=
Subject key identifier: EB:CF:1D:C5:3B:1E:06:34:19:7A:CE:25:34:17:0F:8D:E8:47:CC:C4
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial: 01976DAC0F67793A945717FB637BD37F7641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number: 05E3
Signing time: Sat 14 Jun 2025 09:01:21 +0000
Manifest this update: Sat 14 Jun 2025 09:01:21 +0000
Manifest next update: Sun 15 Jun 2025 09:01:21 +0000
Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: /IOGYOLAd3lgUyU39vKx/rW+/T+HLvMko3s+Qv7801I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:0f:67:79:3a:94:57:17:fb:63:7b:d3:7f:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
Validity
Not Before: Jun 14 09:01:21 2025 GMT
Not After : Jun 15 09:01:21 2025 GMT
Subject: CN=ebcf1dc53b1e0634197ace2534170f8de847ccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:39:d2:89:11:20:c1:be:61:e5:0c:cc:3d:
b6:7a:cb:9c:90:02:b1:d5:8b:ac:15:ac:d5:bf:f5:
1e:cf:26:d6:80:1a:c0:94:27:15:05:3a:c2:a1:e3:
53:6c:f3:46:b7:88:0c:07:ba:d0:ae:eb:6b:13:f7:
64:26:dd:88:d9:38:c5:3f:31:db:2b:a5:fc:ae:15:
20:5d:37:3b:42:c6:12:0e:b8:2f:79:f7:7d:16:bb:
ab:1a:f7:f2:96:d6:1c:88:77:de:3e:03:d9:58:ba:
92:ac:d3:ff:e5:93:4f:c8:39:06:93:5f:8e:d7:e9:
82:72:04:d5:7a:ec:05:d4:7f:b4:41:0d:20:d2:79:
9a:4c:bd:13:a1:33:1c:c5:cb:c3:6a:12:9c:c4:44:
f2:7a:ad:a3:6a:de:5c:5d:55:86:09:6a:10:49:02:
c0:59:6a:6f:4f:fb:af:c3:5c:d6:f7:7b:e6:16:18:
75:1d:aa:60:33:29:3c:ed:1a:ca:d7:2b:73:24:3e:
65:11:39:90:58:b4:2a:93:6d:da:32:7e:0d:de:95:
3e:f5:d7:8e:7b:23:13:8d:bc:9d:fc:11:0b:ad:43:
df:fe:2d:0c:93:bb:c2:3c:a0:60:b4:95:7f:5b:ed:
f5:03:68:14:50:16:d3:d2:cd:f6:ad:d0:17:65:9b:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:1D:C5:3B:1E:06:34:19:7A:CE:25:34:17:0F:8D:E8:47:CC:C4
X509v3 Authority Key Identifier:
keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:93:7d:70:3d:ed:b6:43:dc:b0:7a:9d:bc:bc:44:4c:67:af:
9a:96:b9:a8:33:28:e3:5e:c4:b9:a1:83:db:73:bb:52:73:e9:
95:8e:18:31:56:0e:bd:17:d8:3b:0b:77:89:10:c4:f0:03:91:
ee:ae:e2:77:75:fc:95:ef:81:21:4a:c3:a1:4e:ce:63:ad:ba:
9c:1c:3c:d2:24:23:c3:bb:c7:64:f2:27:21:09:a1:15:1f:53:
b5:e1:25:b0:c9:98:9f:78:03:ae:0c:67:b3:ee:86:c0:25:5b:
42:66:85:a2:58:6f:69:f9:39:19:dd:01:3b:8f:47:f6:5b:26:
a8:5f:e7:07:6f:0f:7f:dd:0c:ee:1e:05:46:8d:c4:27:18:48:
f9:23:dc:3f:cc:86:8b:94:0c:7d:9e:ec:8e:0e:b0:59:0a:32:
80:ca:e3:bc:69:7e:8e:b1:c5:92:87:95:23:41:2f:4b:f9:4d:
a9:10:2c:e9:24:92:f8:9d:24:65:20:eb:00:d8:bd:a9:5e:d2:
93:84:ba:1a:aa:66:47:20:bf:99:8f:54:9c:ad:39:6e:ba:fd:
dc:7a:16:53:7f:d7:b6:ba:45:da:09:f9:29:75:49:f4:08:50:
a8:c9:f4:1b:35:e4:4a:26:22:e7:ce:9f:92:ba:9f:59:52:a3:
5d:31:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:45 2025 by rpki-client