Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: pFslAX9L6vQjQ/oSAWlKJxxeTTU/xmcW+b2jOIRzWJM=
Subject key identifier: FC:37:3B:C1:58:85:41:F7:83:42:64:14:1B:63:D2:2A:7B:AD:2C:38
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 0198D4723BFEBCE7F455B6EA4C254E3D4096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0A1E
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: 29fdS1O33xA8IazBOTVBv8TtcTi+EkEZuxz3Ruvs8tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3b:fe:bc:e7:f4:55:b6:ea:4c:25:4e:3d:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=fc373bc1588541f7834264141b63d22a7bad2c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:9b:eb:60:a3:96:22:b4:88:d4:4e:3b:2d:
d8:d6:5b:e6:f2:a6:ca:54:fc:c6:34:96:cd:c9:55:
ac:a9:e9:af:92:ed:a0:53:e2:7c:f0:ba:fc:42:5f:
74:90:37:09:2d:ce:34:fa:16:6f:1e:1e:d3:54:5f:
50:4d:f1:f7:55:02:20:59:58:25:08:de:98:a5:ec:
31:26:09:ae:1a:1f:65:14:e8:26:6c:2b:4e:ea:30:
5e:2d:a5:cb:19:ee:cb:a3:77:fa:e8:8b:03:b3:b9:
c7:0a:86:70:33:c3:5e:cd:1b:ba:00:4d:f2:f6:98:
b4:26:12:81:12:48:c2:e2:de:ab:b0:97:df:ee:93:
60:cc:d0:36:38:04:dc:d3:9f:43:15:14:c0:c3:10:
a9:44:22:91:be:3c:83:bb:65:95:26:83:d1:d0:82:
be:22:0a:67:22:67:94:3a:57:94:2c:a4:5e:5b:64:
1e:0f:1f:5e:8a:63:b0:7f:db:74:b9:cb:98:9f:a4:
a1:9a:c5:b3:24:20:91:8b:10:d7:1b:3b:46:a7:b0:
41:63:28:43:d0:42:6c:7a:fe:ec:d6:d5:5e:e7:0e:
ae:2b:ac:fd:b9:76:43:1e:16:8f:d9:51:30:18:8f:
dd:fe:73:3f:03:d6:02:aa:a1:b3:e8:3e:bd:d3:4e:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:37:3B:C1:58:85:41:F7:83:42:64:14:1B:63:D2:2A:7B:AD:2C:38
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:6e:6d:1b:a8:24:46:ca:8e:79:67:92:8b:4b:81:46:dc:
1f:78:0c:6d:08:5b:0c:d0:b8:9c:32:4b:67:5f:80:38:08:a4:
ea:76:c7:d8:72:ec:fc:af:e6:65:9a:57:ef:f6:d7:e9:7a:d5:
96:b9:19:d7:ce:16:3b:63:e4:61:82:20:d6:a5:ab:5d:de:24:
ec:40:6c:d7:64:9d:b4:36:b8:3b:11:cb:e0:04:0f:4c:d9:51:
a8:10:56:81:81:f6:77:52:43:c3:1c:8d:d5:b5:21:1b:a2:1b:
6a:24:77:bd:6f:e2:11:c7:7d:14:c8:80:5a:9e:f2:2a:04:8d:
b0:77:de:63:f3:72:62:91:ac:6e:77:1a:d7:ce:06:70:56:7f:
4d:f8:14:b6:83:d1:ab:cd:a4:fa:ce:66:74:4c:40:85:e6:9c:
8f:93:e4:f3:c3:9d:10:46:44:85:ee:bc:25:99:a3:f5:54:90:
f4:3e:b9:98:ab:42:53:39:1d:71:f1:8c:7a:2f:dc:88:90:ee:
c8:0a:95:96:c5:08:7c:db:f4:05:9b:71:e3:22:3f:2a:b5:ee:
7b:d7:be:ec:5c:bc:fb:b5:94:64:d7:69:d3:59:f4:8f:9f:bb:
af:61:3b:d7:65:02:95:a4:93:05:de:1f:40:53:10:ad:4d:14:
f2:2d:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:19 2025 by rpki-client