Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: lCwFjqqY/pKpFETJ8kZ6Ct7ficSRwK8UZXGAw3VuI5M=
Subject key identifier: 21:9A:51:39:F0:29:56:F5:40:92:7F:C8:5C:0F:DA:85:C1:DF:02:DB
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 0197B77BF1E8B4B71C7D834F0D4C8EE0449B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 0226
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: wrrBssabae95DDLXFSdobDVHp0N9QhDCxPPWv3Afi1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f1:e8:b4:b7:1c:7d:83:4f:0d:4c:8e:e0:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=219a5139f02956f540927fc85c0fda85c1df02db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:a1:38:86:21:9b:46:cc:ca:73:e7:f9:dd:
91:9b:69:f0:88:dd:46:b6:bf:0d:63:e3:70:23:3e:
11:10:0d:01:a2:52:e8:e9:a8:98:8e:fd:f1:4e:ce:
d2:59:2a:fb:6d:75:25:e2:35:61:2e:0e:3c:42:85:
94:99:e7:8c:b6:c1:83:f9:6c:fb:15:9b:5a:31:68:
5f:92:51:09:8c:68:b3:66:ed:db:a9:71:4d:b0:e8:
ca:80:fe:0f:d3:82:63:4d:40:0b:7d:7d:47:8f:1d:
c0:00:81:12:0a:51:c2:35:1c:cd:f6:73:b2:a6:e2:
0b:63:b3:e1:53:bf:a4:f8:9f:29:3f:d2:db:32:be:
f3:73:ba:39:6c:76:24:4e:ac:1a:a6:aa:5d:8e:93:
c1:0d:6b:46:3c:77:6b:4f:d3:2b:38:99:e1:7f:58:
06:92:d6:b8:12:b8:02:b5:09:35:51:2d:3f:bd:86:
a4:84:20:14:9d:e7:d4:27:72:0f:3a:58:0f:1d:f3:
e0:d3:f6:04:3a:fe:04:af:f7:e8:d8:f3:38:e0:4a:
ce:04:ca:d0:0f:34:23:3c:21:0e:75:c9:31:65:61:
9c:0d:3c:cf:93:4b:62:b8:8c:e8:54:9a:dc:7d:87:
22:ef:ff:6a:cc:0b:87:81:4d:b7:2f:f6:27:fa:49:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:51:39:F0:29:56:F5:40:92:7F:C8:5C:0F:DA:85:C1:DF:02:DB
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:43:37:f0:3d:ec:3a:36:89:45:aa:5f:ab:5f:6e:03:16:
ee:3e:eb:86:e7:a5:db:79:6b:0a:d4:68:b1:b8:c1:89:95:7c:
2a:28:5b:80:86:e2:2a:eb:13:04:f9:88:57:cf:35:dd:78:f2:
c7:96:97:1c:71:11:d7:fb:12:60:c2:33:45:4a:f3:34:45:c8:
b5:c6:e3:40:8f:fe:10:6c:45:59:43:6a:48:39:76:b9:fe:7b:
97:af:20:9b:2c:ea:83:13:58:5c:a7:41:99:c2:db:cc:eb:93:
f2:e8:44:3c:39:8a:4e:ee:ba:e2:a9:a0:fb:a5:51:3e:93:f7:
0c:60:1f:f7:8d:03:f1:15:b7:63:16:3e:b4:c7:46:91:5c:02:
49:b2:48:89:bb:0c:b0:e2:e2:9e:da:b7:e1:2d:b8:cb:91:e4:
73:41:43:84:ba:20:05:db:13:9b:a3:d9:7d:64:69:e7:bb:01:
ec:88:38:13:e2:17:9b:c6:89:82:9e:35:56:5b:cf:e0:e6:64:
fe:9c:29:7c:9a:a7:aa:06:69:70:91:51:27:f4:11:19:d3:86:
32:66:78:b2:28:ec:72:df:9b:0b:f5:cb:d6:85:9f:14:1d:72:
40:23:d5:d5:ca:6a:4a:9b:70:ca:78:09:6b:82:04:99:6a:59:
45:f4:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:33 2025 by rpki-client