Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: Xl58yNQFsc/WbBgkhJfmBE2ZRGFaNQU4SnF+oVJJGio=
Subject key identifier: DB:25:EC:5C:04:75:FD:07:3B:2A:61:F6:D9:B5:DE:4C:1D:DA:79:F1
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 0198D473A0EABCCC265D74238D98D07E3B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 127D
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: /qHLfZvBpmespxu/HqLefTDM4IER4FiU8W2fqeyPo2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a0:ea:bc:cc:26:5d:74:23:8d:98:d0:7e:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=db25ec5c0475fd073b2a61f6d9b5de4c1dda79f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:5e:52:b3:a3:94:eb:72:f8:84:3b:54:fe:
c4:e5:30:73:89:f8:54:63:ba:1d:99:ef:bb:d0:36:
99:4b:dc:f2:42:dd:b0:a2:b1:2f:3e:66:4e:d6:65:
9f:84:ae:66:fb:53:3a:c6:8d:72:12:fb:33:c3:8d:
74:ba:a5:39:84:b0:92:88:6a:18:f0:6d:4f:6d:7b:
11:9e:d9:3f:05:01:86:ef:5a:c9:b5:b8:de:8b:02:
15:f7:cb:50:26:f8:21:ac:b5:5a:a1:a8:6d:b6:0e:
57:06:f3:66:f5:bb:66:b5:57:42:da:01:d8:8a:51:
36:c2:49:17:13:28:f4:ca:60:fd:21:bf:fa:57:5b:
07:e2:44:9f:22:55:99:95:bf:8b:de:15:ea:fc:b7:
81:4e:e3:b9:43:3b:a6:24:15:57:88:07:21:a7:aa:
5b:04:f6:30:3c:49:4a:29:6d:68:36:6a:56:1f:74:
40:62:b3:c4:76:34:54:7c:b3:09:d0:9f:b4:c9:b3:
ae:03:ed:13:85:8b:91:84:25:23:d0:1b:3e:4a:21:
b7:9d:50:52:5b:69:0b:fc:64:36:f1:5c:57:7d:d6:
ca:7f:3f:b8:49:93:86:e7:1a:4f:7d:6f:65:cd:ec:
86:de:05:f5:c8:5a:b3:da:3a:13:0f:a8:13:84:8b:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:EC:5C:04:75:FD:07:3B:2A:61:F6:D9:B5:DE:4C:1D:DA:79:F1
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:fa:8a:00:93:99:e0:1b:e9:09:f9:36:ca:af:ff:36:66:
db:a5:7a:c1:b8:b0:2d:d5:ea:fd:cc:ff:17:18:17:45:1b:3e:
b2:a0:af:f3:a6:99:ab:0e:08:b5:ee:23:9a:e8:cf:dc:36:b8:
13:08:eb:e8:da:19:e0:0a:22:5f:29:8f:07:25:83:fc:ee:c3:
6c:8f:f9:53:27:96:40:7e:d2:ff:b0:e9:d8:6b:6d:85:3e:94:
7b:17:e2:ff:5d:f8:40:44:54:4f:eb:e8:ae:43:76:d5:28:5a:
75:d3:df:6a:0e:90:0f:5a:dd:10:1a:77:68:19:d1:56:93:70:
a9:4c:ae:e4:b5:ef:e5:ce:c4:cb:a7:08:60:4f:1c:c9:29:a2:
18:0a:b4:36:db:a1:31:92:4d:79:b4:5c:5f:d5:8b:89:a9:1e:
25:ca:bb:4f:04:e8:a9:05:9e:74:78:80:e8:71:ba:09:df:2d:
fe:8c:49:1a:8d:0a:5c:48:47:5d:e0:32:54:00:ae:3a:4d:c7:
04:7b:de:ef:07:bb:07:ab:e4:a4:2c:e8:31:ba:1f:a8:e6:15:
a4:91:60:9c:a9:80:a9:ee:ef:2c:ee:fd:7d:35:01:b4:3e:1f:
43:07:48:97:34:15:9e:ae:af:57:ca:67:c6:27:53:bb:1f:2c:
6f:26:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:14 2025 by rpki-client