Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: ViCmJPYfsAn/vfIij7wnpF6dfQX3Nt+A2SURzIoP564=
Subject key identifier: 33:B7:EB:96:16:91:B8:21:CB:47:A8:51:97:5C:98:A8:20:25:87:A4
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 0197B745661180D135BF63626B1A059DA76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 13AE
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: 77mCe86P5RTI8rIvAeD9DkfTN6ef4aC1siuyVQ3WzyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:11:80:d1:35:bf:63:62:6b:1a:05:9d:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=33b7eb961691b821cb47a851975c98a8202587a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:a7:79:8a:fe:b8:01:87:3a:85:72:17:01:
93:1f:87:a3:f4:7b:50:69:fe:60:9b:3e:f9:42:ce:
e1:b1:c3:bb:92:8c:e5:03:74:80:94:e4:5c:3e:db:
d1:a8:cd:1a:3f:17:75:7a:e0:42:78:e9:2d:f5:f6:
6e:84:1b:af:f8:db:74:1c:2c:0a:e0:73:c6:b8:2e:
33:76:70:0e:fd:2d:69:25:d4:15:80:a5:10:f2:1d:
34:f3:17:8a:38:39:0b:22:8d:c3:1f:1c:94:12:99:
a4:f0:35:a2:a5:f4:c6:85:58:ed:9b:72:70:49:bf:
e1:b9:ec:0c:48:74:cd:a2:a8:95:e5:d0:6b:58:fd:
f6:9f:41:47:fa:6d:a6:fc:60:83:f8:8e:4f:38:87:
b6:4f:73:77:a6:0d:0b:41:8b:13:f0:0d:02:99:0d:
06:88:5b:c4:3a:19:eb:07:89:bf:ad:20:58:65:4d:
a0:72:70:57:70:0c:75:8c:02:30:2a:ae:68:c6:52:
d1:01:24:a7:f1:25:78:85:61:5c:0c:9b:92:00:05:
c5:41:b7:f6:ac:ab:a9:57:a2:c9:aa:0f:a8:d9:1f:
b5:bd:17:1e:22:cc:4b:20:8c:93:55:d3:e8:61:df:
15:48:5b:65:a9:33:87:f5:c2:8a:f3:8b:1e:ec:a7:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:EB:96:16:91:B8:21:CB:47:A8:51:97:5C:98:A8:20:25:87:A4
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:17:55:3f:28:39:9a:0d:68:dc:30:b6:da:df:8f:ef:46:84:
9d:6b:e9:a6:47:71:62:eb:af:46:3e:a9:2d:56:c7:9c:50:83:
58:68:1c:9c:13:a8:37:4d:f4:6f:62:17:e4:35:59:2f:31:57:
c4:98:f3:6d:0e:d5:96:59:1e:68:b9:f9:e3:f9:7a:1b:65:c1:
75:9f:d0:a8:c3:52:09:52:8a:b8:29:4d:73:f0:98:80:4a:08:
b3:c4:7c:72:73:75:8b:19:59:0a:fe:34:a2:aa:c8:27:3f:08:
49:0c:92:fe:6e:ee:7d:f2:26:f5:52:e8:d5:41:90:82:18:af:
dc:4e:c0:a5:ce:97:83:3d:45:f8:b8:38:e2:84:2c:71:74:e4:
43:3b:5a:fe:7d:1c:f4:60:fa:6b:83:a0:6e:35:1a:3d:c5:5e:
e4:6f:c1:fd:76:c6:07:05:eb:09:f6:31:25:3c:60:1f:7f:0a:
b4:90:9b:d7:b4:ec:ca:4a:3b:da:33:2a:09:af:70:da:fb:2b:
7b:51:21:ea:89:7e:18:e9:a3:dc:88:b5:7b:7f:28:3f:f7:44:
7d:5b:7f:d7:a0:ea:ac:7b:3d:45:de:3e:a3:f2:64:61:f0:d7:
7b:60:7b:58:6f:81:58:1c:ae:15:09:e8:78:e9:a9:70:22:d3:
5f:f6:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:50 2025 by rpki-client