Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: BvKaToVlC2/mcRYtDtVOHQYAbC1u+CuVpwuWXS2rri4=
Subject key identifier: 90:32:84:43:36:D2:D1:80:B7:6D:84:A9:36:D7:02:9D:A9:7B:3C:03
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 0198D65F2579760943CAA3C1BD1CF37439E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: 9qeCl3lOfplCOT4aXcGhd4kHSjz3NTc/m6UdNre8Zxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:25:79:76:09:43:ca:a3:c1:bd:1c:f3:74:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=9032844336d2d180b76d84a936d7029da97b3c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:1a:54:0f:5e:6d:74:cd:88:c2:24:bf:a1:
ae:9f:d3:c8:8e:2b:2b:8c:07:bb:6b:54:a4:9b:dc:
11:5f:82:92:cd:cf:62:33:4f:2d:dd:79:ca:38:bf:
d8:5e:62:21:2a:d8:f2:a4:d6:4f:ef:e6:0e:58:3f:
3b:ab:a8:e2:03:21:0a:a5:6a:ef:d1:a0:6d:56:a2:
2c:60:91:48:07:47:27:17:81:a6:e7:a2:c8:4c:fa:
b6:56:92:9f:84:38:61:56:f7:32:24:2b:8e:57:92:
25:92:9d:4e:0b:89:0b:6c:63:1d:2e:ca:0b:1a:82:
a0:bb:02:71:c9:05:d4:8f:d5:6b:a7:c8:09:a6:9e:
08:60:f8:1f:6e:f7:39:91:4e:04:1c:85:9c:0b:4f:
73:a4:0d:42:43:99:96:2d:85:83:01:4e:54:cf:dd:
2b:a8:7d:b3:e2:e8:da:60:eb:3c:18:67:1f:4a:5f:
85:1d:42:d8:1b:ae:0a:78:a7:93:33:75:df:e9:76:
da:4a:ad:1a:19:68:ed:49:35:a8:25:93:b7:f2:5f:
38:a1:94:6e:9f:bb:70:50:e0:8e:56:83:11:73:fa:
0f:e9:c8:8d:04:5d:bf:09:cd:c1:4e:0f:5e:15:4b:
0d:62:80:d2:70:43:f6:dc:de:fb:44:86:ab:c9:2d:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:84:43:36:D2:D1:80:B7:6D:84:A9:36:D7:02:9D:A9:7B:3C:03
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:96:76:28:7a:1d:51:a3:df:6c:4c:de:01:8d:67:99:ab:0f:
a1:a3:83:1e:2d:23:0a:35:f0:73:9e:fe:35:a5:81:df:5f:8c:
a1:c4:98:d0:44:9f:3b:55:91:35:9c:38:27:23:cb:c9:36:dd:
6d:27:5e:8b:5a:44:47:be:a7:d3:5c:b1:44:f8:fb:8b:47:c3:
b6:f5:fb:a9:a1:64:7d:17:04:cb:2a:cf:19:02:53:77:80:03:
f5:67:aa:08:d9:8f:5e:9e:44:56:2e:43:d6:85:a4:bb:ea:21:
fd:ba:c3:9a:5b:1e:51:51:45:03:09:88:72:d1:87:33:db:2f:
8f:e8:51:5c:44:62:19:e7:d6:2d:37:12:ec:ee:65:45:4f:82:
f5:f1:29:34:7a:42:c7:66:ec:18:66:e3:93:c8:2a:84:cb:c9:
f9:b4:38:06:f6:aa:ff:6e:b1:0a:1b:57:04:dc:0c:44:b9:68:
9b:30:13:63:91:ae:e6:77:da:a6:35:a2:34:4f:f2:3e:7f:98:
7d:36:fd:22:09:1d:ed:fb:90:eb:fb:e4:f0:30:2d:f3:fa:c7:
73:c0:b7:3e:0a:4b:3c:0a:f8:ed:a7:38:6c:e1:5f:c6:01:ff:
be:66:55:ae:bc:b7:a4:a2:55:a6:a4:fb:40:54:4d:df:1f:a8:
b1:bf:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:40 2025 by rpki-client