Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: qRbn96aZuExiKayoNb+NQD0x1menkhVK2SHASCG00ys=
Subject key identifier: 26:DC:0A:C8:34:BC:12:EB:09:C8:A0:3C:74:A2:C2:0E:A0:CE:6C:C6
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 0197B6D75B5D1F9DCC5171F5996EA15CD802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 025B
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: aARxkfafkYgMcFp023FZ2O1TkoDuS+H11EWcvt8wke8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5b:5d:1f:9d:cc:51:71:f5:99:6e:a1:5c:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=26dc0ac834bc12eb09c8a03c74a2c20ea0ce6cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:1b:54:f5:37:76:02:1f:9f:74:cf:5b:b2:
c0:cb:b8:c4:4c:b4:9f:1e:9e:7b:e6:8c:bb:76:ea:
05:87:54:ea:a0:45:fb:d9:f5:6c:1f:b9:17:75:e5:
f8:11:3a:0d:ca:bd:f0:ae:88:34:75:ba:c7:d6:24:
63:f4:8f:c5:6c:f4:cf:c4:23:3a:c1:ae:04:d0:6a:
a9:4b:b5:cf:a1:e0:19:65:ff:72:d5:84:50:c8:e1:
47:e3:b3:7e:44:4a:f1:05:6a:70:f0:63:8b:9a:c2:
b6:d0:c6:73:df:ef:ee:e7:29:6a:f2:a4:43:fb:6c:
16:74:c6:57:83:28:da:83:89:07:5d:e8:aa:0e:bf:
00:fc:93:e3:fc:6e:3e:e7:1b:71:f8:3d:91:46:3d:
be:f8:3f:b7:2d:09:3f:eb:95:55:31:05:1f:d4:20:
81:47:f3:f7:77:0e:4c:cc:2a:5f:5c:62:64:4f:8d:
9b:e4:4a:05:10:e2:68:9a:77:a9:19:7e:96:dc:9b:
8d:35:2f:c4:19:6f:6e:ae:48:ab:af:ec:3d:36:6d:
47:c5:ed:79:39:b2:70:9d:06:f4:a7:01:ac:c8:4c:
f8:3a:01:4d:ea:8a:02:6a:a2:d9:ed:c0:ca:96:5b:
06:b5:f1:cd:69:31:5a:44:c5:c8:d8:a6:9f:06:30:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:0A:C8:34:BC:12:EB:09:C8:A0:3C:74:A2:C2:0E:A0:CE:6C:C6
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:af:a6:dc:6c:bf:e8:fc:52:e5:67:d8:cd:55:f3:21:3e:
9c:43:24:39:c0:1a:72:86:5b:41:57:5f:df:6e:04:e4:d4:e7:
79:18:a2:d3:fd:a5:70:57:4a:cd:f8:23:dd:f7:39:53:f2:f6:
76:0b:85:18:17:aa:89:3f:51:7e:6a:d5:97:3c:76:07:aa:3c:
31:ae:5b:5d:de:0b:62:df:1b:4b:f9:e4:21:7d:41:e8:1f:0c:
92:9d:45:61:50:ed:d4:58:dc:10:2e:c3:61:da:4d:1c:c8:a1:
5b:58:37:6d:3e:c8:4a:5b:60:0e:3f:6c:a3:60:95:83:c6:5d:
86:0a:78:3b:ad:62:cf:bb:6a:58:10:47:16:31:d4:b2:3c:6f:
73:96:04:39:67:c0:2a:93:a6:5f:1f:43:8c:77:9e:50:fc:4d:
b3:36:e1:c5:2a:6d:aa:d1:9f:06:c7:80:97:02:2d:39:aa:35:
fe:74:c5:a9:8d:c8:b3:5e:86:5d:73:85:18:c0:fd:89:98:5c:
f2:20:66:ce:fa:a2:15:94:81:90:21:fc:ab:85:12:cb:e1:81:
b9:38:fd:78:ca:bc:6a:62:23:b5:71:63:5c:ba:1c:fc:a3:56:
1a:89:23:a5:b1:15:07:8f:be:fb:9e:60:6f:3b:3b:61:6c:0e:
90:9c:60:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211tdH53MUXH1mW6hXNgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTBjZGI5YmFlMGI5MzJjNzlhMjlmOGQ5NzkyZDMwOWY3
YWQ3YjcwHhcNMjUwNjI4MTQwMDU2WhcNMjUwNjI5MTQwMDU2WjAzMTEwLwYDVQQD
EygyNmRjMGFjODM0YmMxMmViMDljOGEwM2M3NGEyYzIwZWEwY2U2Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IUbVPU3dgIfn3TPW7LAy7jETLSf
Hp575oy7duoFh1TqoEX72fVsH7kXdeX4EToNyr3wrog0dbrH1iRj9I/FbPTPxCM6
wa4E0GqpS7XPoeAZZf9y1YRQyOFH47N+RErxBWpw8GOLmsK20MZz3+/u5ylq8qRD
+2wWdMZXgyjag4kHXeiqDr8A/JPj/G4+5xtx+D2RRj2++D+3LQk/65VVMQUf1CCB
R/P3dw5MzCpfXGJkT42b5EoFEOJomnepGX6W3JuNNS/EGW9urkirr+w9Nm1Hxe15
ObJwnQb0pwGsyEz4OgFN6ooCaqLZ7cDKllsGtfHNaTFaRMXI2KafBjCYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbcCsg0vBLrCcigPHSiwg6gzmzGMB8GA1UdIwQY
MBaAFFUQzbm64Lkyx5op+Nl5LTCfete3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQt
ZGY1OTAyMDEzY2RmLzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQtZGY1OTAyMDEzY2Rm
LzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt6vptxs
v+j8UuVn2M1V8yE+nEMkOcAacoZbQVdf324E5NTneRii0/2lcFdKzfgj3fc5U/L2
dguFGBeqiT9RfmrVlzx2B6o8Ma5bXd4LYt8bS/nkIX1B6B8Mkp1FYVDt1FjcEC7D
YdpNHMihW1g3bT7ISltgDj9so2CVg8Zdhgp4O61iz7tqWBBHFjHUsjxvc5YEOWfA
KpOmXx9DjHeeUPxNszbhxSptqtGfBseAlwItOao1/nTFqY3Is16GXXOFGMD9iZhc
8iBmzvqiFZSBkCH8q4USy+GBuTj9eMq8amIjtXFjXLoc/KNWGokjpbEVB4+++55g
bzs7YWwOkJxgnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:37 2025 by rpki-client