Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 8PHc9kOMTOxgtONvgmhwCi+Sijz29n6DPiepVoILwIk=
Subject key identifier: 6F:BD:70:A4:69:47:80:5A:C3:89:16:9A:8A:33:86:90:53:6E:97:62
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0198D4745B1420F7BD6B4DBDBF79BFD5D628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1319
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: oS+5FV0VN1v/+4SURhCADmLEMyxvqxthE3LKqEwon5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5b:14:20:f7:bd:6b:4d:bd:bf:79:bf:d5:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=6fbd70a46947805ac389169a8a338690536e9762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:f0:1f:6b:07:8b:05:47:8e:80:fe:7c:84:
8f:8c:34:f2:1f:fb:5d:5c:ba:41:75:49:bf:5b:b9:
cf:31:d6:c2:98:1c:c5:65:fc:10:7e:72:18:b1:41:
23:5d:64:b9:1d:d4:14:37:09:51:88:66:32:42:3d:
2c:19:73:bf:8b:a4:c3:f0:05:3d:0b:87:5b:95:05:
d0:63:ae:fe:8d:de:02:e7:83:da:f9:9d:c9:8b:d4:
f3:1d:4c:57:e0:e4:86:fc:71:53:26:26:2d:4a:b8:
f8:74:a0:e3:c7:43:d0:26:18:0b:ea:e7:a5:62:05:
e1:5e:d9:a6:ef:9c:e3:72:57:5c:7a:a1:49:2d:82:
77:1c:12:36:81:d0:13:60:af:eb:e6:89:2e:a1:e6:
8e:f0:5e:4b:34:00:49:1e:0f:b9:4b:32:4b:7e:36:
45:70:a8:b9:8c:c8:89:24:fd:1a:51:f5:e6:f4:11:
9a:a6:ab:87:5c:17:df:dc:dc:06:aa:b7:80:22:4f:
ef:3e:51:7b:4d:22:27:49:da:da:12:15:12:a0:9b:
1a:c4:cb:3c:5f:5c:cd:2d:1b:7e:23:26:37:b5:cc:
fc:d0:1d:9a:c5:b9:e0:bd:13:19:ff:9f:8c:67:16:
25:c1:fd:04:07:5f:80:fe:52:8d:54:da:25:9d:15:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:70:A4:69:47:80:5A:C3:89:16:9A:8A:33:86:90:53:6E:97:62
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:32:49:e2:a7:43:5c:59:7c:18:d0:55:c1:5a:fb:be:4a:a0:
5c:c3:1c:9b:7f:c9:93:26:53:6f:f2:5a:88:44:33:94:b4:36:
d6:38:db:38:55:0e:60:1a:3d:1b:be:f8:00:ca:a3:69:35:da:
0b:98:6f:61:d7:ca:36:72:35:69:f4:ba:3e:36:3b:68:42:b4:
94:95:fd:a7:fc:91:60:9d:ca:52:ce:76:c8:18:49:ed:3c:98:
9b:23:a9:ae:bb:50:7a:48:aa:1a:7d:4e:32:7a:44:6a:d2:1c:
78:4d:ff:cc:af:25:d2:3b:3d:82:05:55:99:f0:07:18:21:24:
55:08:10:95:06:61:cd:7f:5e:5c:06:34:65:44:71:f0:86:3a:
1a:87:2c:76:c0:53:8a:0c:2e:13:91:c1:f2:f2:a4:70:ab:ed:
2e:d0:1a:d5:6a:ec:00:76:f1:97:0f:71:bf:ff:6e:9a:14:9e:
80:3f:b3:be:b6:6c:d2:de:78:22:79:04:87:40:8c:22:d4:e9:
d9:0e:3f:6f:b4:39:da:b8:85:af:91:a8:c0:01:c9:71:1b:f1:
2f:34:3c:cd:3d:39:85:64:0e:48:af:4d:b0:9c:99:73:16:62:
24:9c:2e:3e:f6:6d:bf:75:e1:39:65:0e:45:c9:23:29:80:70:
ce:4e:e7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdFsUIPe9a029v3m/1dYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjNlNDQwOTVmMzhjYTM4ODgzNmJmNjY1YjZmOWYwOThk
YzU3OTQwHhcNMjUwODIzMDEwNDExWhcNMjUwODI0MDEwNDExWjAzMTEwLwYDVQQD
Eyg2ZmJkNzBhNDY5NDc4MDVhYzM4OTE2OWE4YTMzODY5MDUzNmU5NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB7wH2sHiwVHjoD+fISPjDTyH/td
XLpBdUm/W7nPMdbCmBzFZfwQfnIYsUEjXWS5HdQUNwlRiGYyQj0sGXO/i6TD8AU9
C4dblQXQY67+jd4C54Pa+Z3Ji9TzHUxX4OSG/HFTJiYtSrj4dKDjx0PQJhgL6uel
YgXhXtmm75zjcldceqFJLYJ3HBI2gdATYK/r5okuoeaO8F5LNABJHg+5SzJLfjZF
cKi5jMiJJP0aUfXm9BGapquHXBff3NwGqreAIk/vPlF7TSInSdraEhUSoJsaxMs8
X1zNLRt+IyY3tcz80B2axbngvRMZ/5+MZxYlwf0EB1+A/lKNVNolnRXlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+9cKRpR4Baw4kWmoozhpBTbpdiMB8GA1UdIwQY
MBaAFL6z5ECV84yjiINr9mW2+fCY3FeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUt
YTZhNDk0NTYyZTFkLzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUtYTZhNDk0NTYyZTFk
LzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzJJ4qdD
XFl8GNBVwVr7vkqgXMMcm3/JkyZTb/JaiEQzlLQ21jjbOFUOYBo9G774AMqjaTXa
C5hvYdfKNnI1afS6PjY7aEK0lJX9p/yRYJ3KUs52yBhJ7TyYmyOprrtQekiqGn1O
MnpEatIceE3/zK8l0js9ggVVmfAHGCEkVQgQlQZhzX9eXAY0ZURx8IY6GocsdsBT
igwuE5HB8vKkcKvtLtAa1WrsAHbxlw9xv/9umhSegD+zvrZs0t54InkEh0CMItTp
2Q4/b7Q52riFr5GowAHJcRvxLzQ8zT05hWQOSK9NsJyZcxZiJJwuPvZtv3XhOWUO
RckjKYBwzk7ntA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client