Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: 7fPJMh0cbXbBDevBK2r5K0015rHB9O910V6EaEWX/Io=
Subject key identifier: 94:EC:DA:22:AA:70:40:96:77:77:6D:BE:23:C2:D7:DD:6B:0C:F9:A9
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 0198D473637345BDD6556C2308CFB47D90DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 05A9
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: iRmZhtUVPqkszh8helLaXJeqCE3NraQEKdMfL6K63+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:63:73:45:bd:d6:55:6c:23:08:cf:b4:7d:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=94ecda22aa70409677776dbe23c2d7dd6b0cf9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:09:b1:ef:8f:df:71:c8:67:fc:58:d7:b1:
d6:9b:7f:d4:cd:31:f8:58:4a:66:64:cf:04:0a:b4:
fb:87:5c:cd:46:d0:72:ec:45:c6:95:95:67:86:f0:
63:39:14:18:39:ba:7b:06:63:2e:ea:39:5b:f3:21:
ea:02:e1:c2:d8:5d:96:93:39:36:77:f7:02:f1:16:
f2:09:4d:f4:9e:69:db:1e:bc:34:a8:e3:16:49:97:
51:4d:a1:de:1a:e8:95:0c:ac:1c:48:05:c2:f7:da:
19:9f:4e:2f:cc:44:a3:49:3e:bc:f4:94:f6:41:9f:
1b:35:dc:a5:81:79:f4:3d:8f:52:91:7d:39:19:ca:
9b:eb:bb:92:dc:b6:88:ac:1b:9c:54:50:f7:66:4c:
65:54:9e:c7:1c:0a:ba:db:4f:49:02:9b:5e:07:94:
24:a2:38:4b:08:af:55:03:78:c3:3c:31:20:d9:02:
e2:71:27:5e:d5:02:67:54:ba:89:5f:58:74:ee:07:
35:41:7f:6d:b3:cf:b5:69:3e:d1:6e:54:ab:de:13:
ad:97:f0:54:9e:40:00:31:c4:4d:4f:0f:61:5c:69:
48:57:ff:d8:c3:5a:15:66:1c:b2:40:f4:5a:6e:f5:
c0:f9:6c:0c:fb:83:48:52:9d:25:ac:5b:a7:56:f7:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:DA:22:AA:70:40:96:77:77:6D:BE:23:C2:D7:DD:6B:0C:F9:A9
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:b5:54:07:4b:da:6c:31:0c:65:08:e5:10:4e:a9:b9:ca:
bf:9e:3c:67:80:f2:1f:11:a9:36:a4:d2:3d:71:5d:a0:6a:44:
d7:d9:c5:77:d6:6d:d3:17:4a:2a:f0:9f:41:69:01:83:37:54:
e0:94:a6:2d:02:a8:0f:9d:ff:7e:d1:6c:2e:df:ed:69:ab:63:
45:14:6f:47:67:fb:f9:a0:11:1f:86:bc:a3:06:b7:5b:c4:e3:
50:a4:5a:dc:e5:00:44:d3:10:70:5a:7d:66:f7:a0:f9:4a:ba:
ca:c0:f9:cb:79:ff:22:a9:52:fa:da:ae:35:a6:da:63:5b:99:
80:b2:25:fc:f6:82:1c:10:52:68:48:0a:ef:40:37:1d:46:c1:
56:66:bb:a6:16:bb:67:46:73:f4:6e:ef:4a:06:7d:e3:1a:65:
d7:0a:15:bf:93:16:f9:3f:39:1d:77:d9:7d:6c:6d:7c:15:84:
85:53:ab:bc:d8:04:2c:80:4d:f8:0c:b5:b8:c3:01:97:29:59:
a4:27:ec:2a:47:7f:f3:c7:9c:b2:f6:ec:c9:a4:41:4b:11:a1:
0d:20:ad:26:4a:eb:60:ea:6e:92:1a:8e:e0:b3:c7:26:a5:34:
70:da:b7:1d:54:36:59:22:1e:e8:90:e3:f7:82:99:90:7e:29:
ed:3b:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:58 2025 by rpki-client