Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: dINEjlz+QV46+2V5yUVUiW6WzWhkTs0CCXzQpp41Vz0=
Subject key identifier: 0E:01:30:9F:05:57:FD:85:19:5E:46:41:48:96:65:C1:06:D2:59:C5
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 0197B6A21C39DB6B02E9C8979294C3AB51E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 0681
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: 2TAnNAxKLxjSJi0y6/H1lsy0oLJ569xuuabLvA7gGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1c:39:db:6b:02:e9:c8:97:92:94:c3:ab:51:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=0e01309f0557fd85195e4641489665c106d259c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:b1:88:7a:37:43:c8:47:1a:b6:d4:0b:84:
36:80:0e:33:fb:82:ca:95:6c:93:18:e1:00:30:53:
5f:d6:b2:c2:4f:c2:af:55:19:87:7b:d0:84:19:8e:
e9:cd:b0:57:4b:9d:17:ac:bc:22:d0:6e:2d:5c:a2:
af:5e:59:61:84:20:51:f6:8b:25:13:83:df:9b:b4:
cd:2c:4b:65:c1:30:1e:25:b6:e8:7b:40:ad:06:ae:
d7:83:27:87:2b:d4:1c:ad:d2:bb:cf:8b:3f:4d:db:
13:a3:40:7a:49:1d:1f:8e:fa:34:65:50:02:ec:7a:
d1:9a:38:90:b9:2d:9c:5c:91:0b:ef:7f:c2:ac:05:
41:2e:b0:14:a1:e3:1e:e2:f0:b5:1d:a8:3f:51:dd:
3e:16:a8:49:f5:6e:99:0a:d3:db:7c:2c:34:38:2a:
2e:40:09:98:d6:50:f3:aa:4d:82:cf:9b:fc:f8:18:
e0:a3:9d:22:ab:30:a6:48:98:43:60:de:e5:9d:d2:
fb:f4:cd:58:ba:96:c3:20:52:dd:4a:39:c2:53:64:
3e:ab:29:02:03:63:a7:00:a3:64:02:67:13:68:83:
a7:80:35:62:5b:6e:09:61:94:ea:b6:da:77:bb:45:
fc:c8:ea:e1:e5:4e:f7:f0:a7:32:68:c5:eb:42:4b:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:30:9F:05:57:FD:85:19:5E:46:41:48:96:65:C1:06:D2:59:C5
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:35:ef:29:74:f8:a8:27:c2:74:52:0d:4b:ef:c7:65:17:fc:
ec:71:8e:e9:ec:0d:46:82:33:60:d8:0e:8a:9b:a5:54:b0:08:
f6:31:51:5f:e0:e1:e0:02:aa:32:96:e7:ce:7c:b6:f1:03:4b:
11:a5:25:3a:bb:84:31:35:4b:3b:2b:4f:8c:ed:f1:19:55:2c:
eb:0a:6b:8c:fd:6e:29:dd:f3:57:7c:f5:6a:7a:af:6e:10:6b:
77:65:6a:c4:f6:13:3f:0c:7b:17:6a:d2:f3:d0:de:80:c5:06:
f8:bf:eb:dd:4e:bc:23:e0:ee:5e:40:14:af:84:85:78:dd:79:
89:9a:c0:ab:af:fe:17:40:27:b5:eb:e5:a7:9b:11:de:f1:c5:
0e:76:62:3c:c9:c2:10:db:3f:ba:20:bc:a5:1c:ae:6e:42:b6:
03:cb:a6:54:4f:67:8e:9e:23:55:01:8e:47:69:4f:f1:99:d4:
ba:c2:a8:df:b8:c5:d3:b3:6e:7b:85:ce:b4:98:49:55:a0:17:
54:85:c2:42:da:ee:f3:b4:8e:19:bd:00:78:c0:03:3e:fc:54:
b3:42:a8:29:e9:34:f0:f9:7f:0a:ff:35:86:31:65:b8:ab:9e:
cf:6f:0d:cc:2a:35:eb:e3:9f:2f:e3:5e:69:db:87:fa:f8:6c:
aa:06:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:49 2025 by rpki-client