Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: AI+/vdVBn49V1idWLb+PhLA60TvctqM0jW2lT6iP2v8=
Subject key identifier: 90:60:2A:3E:12:1C:10:35:BF:8B:DB:5B:77:B7:00:19:4C:5C:30:DF
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 0198D660386522FCAECC09096A2582C2DEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0245
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: Ld5A5Spguwc21wpc8IcnP22+1pu/+korOtoed8tFbvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:38:65:22:fc:ae:cc:09:09:6a:25:82:c2:de:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=90602a3e121c1035bf8bdb5b77b700194c5c30df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:61:10:28:73:2a:f8:fd:7c:1e:53:98:f8:
3a:5e:12:75:64:1b:2f:5a:1c:3c:f1:74:46:82:1e:
b4:31:78:ee:bf:a3:d3:70:ff:94:fd:03:71:f3:b5:
93:7c:8c:a0:e3:b8:5f:6d:f3:ab:7f:c0:6f:39:04:
0a:83:88:c0:b2:73:ab:3a:5a:e8:36:05:8a:13:98:
dc:9a:bb:2a:91:13:7d:9c:51:20:5d:90:7c:fb:8a:
8d:37:db:b7:72:e3:c3:d1:c6:ad:22:db:50:b2:2f:
b3:ba:69:2d:01:40:10:73:63:fa:20:b7:c4:80:81:
d6:2e:fb:4f:5d:06:3e:4e:65:4d:83:b5:7a:a9:28:
4e:ba:70:08:a9:69:93:03:ed:52:1d:60:5a:c5:a0:
87:49:3c:cd:1b:9c:67:26:a9:55:e8:74:fa:f6:e5:
1e:36:e9:dc:25:39:7a:5b:8b:d4:26:db:ec:26:9b:
ed:7f:ea:32:3f:54:ce:7f:5f:07:44:91:db:75:36:
7c:ca:60:1a:c4:39:d1:bc:5d:82:36:9a:31:e5:90:
60:74:b5:58:3c:57:c8:09:ae:30:05:40:74:24:46:
05:d1:71:95:05:d0:1d:40:f6:e1:99:88:66:4b:79:
6d:9a:04:57:18:d7:2a:c9:52:61:41:67:49:61:b8:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:2A:3E:12:1C:10:35:BF:8B:DB:5B:77:B7:00:19:4C:5C:30:DF
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ac:5a:7e:2d:13:57:b2:a0:39:35:4c:94:00:aa:91:dc:1b:
86:6d:f0:f5:e2:0b:bf:e3:7c:18:a2:06:f4:05:d6:99:f1:6b:
f9:a7:29:e4:b4:bd:5b:b1:70:aa:96:22:ae:7a:63:c9:f1:76:
6b:be:ab:7a:62:43:b0:19:86:05:7e:2a:ea:51:86:5f:52:18:
f4:71:b6:7a:04:68:b6:e1:e9:46:87:e8:4f:49:81:5f:a1:ff:
c6:40:21:bc:ae:7e:9b:8c:db:cb:25:09:c9:28:f0:5d:1d:14:
b6:95:e1:4b:3f:0d:a9:c9:19:de:3e:59:a9:07:e1:ad:a8:77:
b7:d3:5a:22:3f:e5:f8:fc:ab:7b:6d:65:4c:c7:8a:ad:71:dd:
f7:6c:4d:27:1d:77:2c:be:24:27:1b:61:ab:e4:be:18:5b:02:
e2:57:ca:92:2c:3c:19:19:94:47:24:9e:6e:9b:d1:79:c9:38:
a8:ad:2a:82:5f:96:6d:ba:27:45:f8:02:10:eb:9c:38:68:2c:
59:2b:26:6b:1c:30:aa:a7:48:82:27:eb:e4:3f:c6:fa:94:b6:
0c:43:23:cd:69:de:67:c2:90:a0:0a:e3:8a:7f:ec:47:d9:6a:
64:34:fe:e2:27:2f:d1:2e:7a:61:78:2c:e7:12:e2:39:40:fb:
61:75:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:22 2025 by rpki-client