Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: NkIyQvF6RCJI78S3smDxq/Vw+KoMtTkxk49bfQjuXoo=
Subject key identifier: 40:A9:E2:77:5E:AC:61:84:74:86:1A:FE:A7:CD:A6:C6:F0:F6:0A:B8
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0197B6A09A35A6F4B9FC32291B525919E119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 112F
Signing time: Sat 28 Jun 2025 13:01:07 +0000
Manifest this update: Sat 28 Jun 2025 13:01:07 +0000
Manifest next update: Sun 29 Jun 2025 13:01:07 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: ojgFk++BkS/qZiba7JlWOp9i/57+JuRdNI3V3MDypIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9a:35:a6:f4:b9:fc:32:29:1b:52:59:19:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Jun 28 13:01:07 2025 GMT
Not After : Jun 29 13:01:07 2025 GMT
Subject: CN=40a9e2775eac618474861afea7cda6c6f0f60ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:9c:03:ee:f8:54:d9:78:77:3f:4f:82:bd:
73:2d:60:d9:bd:4b:15:07:f4:97:e7:c5:94:c1:5e:
b7:e6:05:65:18:11:e6:9e:20:bb:e1:64:1a:de:cf:
94:c4:7c:1c:6d:f4:27:ac:5e:58:47:f1:56:3d:8f:
14:26:2b:b7:c5:7c:a5:cb:e9:2e:ca:65:c6:9e:8b:
ca:d0:07:de:82:03:43:e2:8b:7c:67:07:cf:23:5c:
c9:a7:ed:c4:47:bd:86:13:0d:0a:51:7b:1d:9e:5c:
e8:f6:74:2b:31:a9:62:6f:11:77:c9:30:9b:02:9d:
b9:fa:27:12:55:f3:45:17:49:98:71:45:da:d9:ca:
9d:71:30:46:96:fb:ce:36:f2:80:fd:d8:61:43:bf:
44:33:07:be:20:81:5b:ef:59:1a:1b:0f:e4:c6:a3:
d4:b1:d2:37:ed:75:78:31:85:40:78:8e:6c:fc:ff:
30:2c:4e:15:43:3e:93:45:6c:52:b5:2e:3a:89:8c:
d0:38:8d:89:39:9f:e2:5e:53:2e:7c:8f:5d:cb:fa:
ce:9f:b8:28:e6:a8:ce:9c:e6:d2:c2:09:ed:5f:9d:
fa:7a:b4:c9:40:3d:9a:0c:bd:70:19:b8:0d:a9:d9:
31:bb:7c:8e:5b:3c:f2:ea:31:40:9c:93:36:f6:b3:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:E2:77:5E:AC:61:84:74:86:1A:FE:A7:CD:A6:C6:F0:F6:0A:B8
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f8:03:be:a9:ce:74:88:fb:83:e0:47:01:4e:0e:b7:42:51:
09:23:ff:9c:f8:fe:ed:ca:f8:e0:1b:0e:86:59:28:a5:f1:70:
58:ae:e0:9d:e2:76:b8:3d:ef:da:85:13:c3:68:f5:0e:4f:26:
7e:f9:94:b0:73:0a:46:77:cf:d4:1b:81:94:7d:45:73:07:32:
70:0c:93:b6:39:20:8d:4e:f4:fb:d4:2c:ea:e5:33:7a:64:ac:
ff:ab:67:d6:5d:01:7f:7d:64:b3:87:f8:3e:39:39:48:8d:58:
26:18:20:7b:69:48:de:35:cb:b2:42:1e:6e:71:20:86:90:93:
ed:73:af:50:5c:4f:87:71:8d:7b:34:4e:78:a5:66:8d:96:7d:
12:55:f5:40:68:5b:e5:15:23:76:fc:2c:4a:ba:95:89:f5:c4:
75:ab:8a:68:91:67:b4:f9:26:1d:4f:0d:53:4b:b8:55:f4:25:
33:61:56:87:fe:fa:70:bc:fd:f2:1b:ef:87:ef:59:13:88:4c:
9f:0b:fd:e8:41:4e:e5:fd:9b:a8:f4:7c:6b:76:9c:06:51:29:
91:18:28:9e:17:a6:08:f9:c4:3a:cc:69:20:c5:25:76:d2:dd:
38:4a:68:e4:7e:39:bf:60:c8:46:c2:4e:d5:23:a6:cc:62:d2:
84:75:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:06 2025 by rpki-client