Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: iFQGKF8xSx5jwAJ0fu3sI6MqIlDcfw/W+fSN8zM+UAs=
Subject key identifier: 5F:14:51:58:AF:A4:23:8A:DD:70:57:A4:AC:A0:16:73:33:0A:AA:43
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 0197B6A0599A85DB2A958A3D1DDCD05D2748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 10DD
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: QzZW3Fe68CvnxNU4ycxWXhB3T2x/rByyQAKiNbFcIZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:59:9a:85:db:2a:95:8a:3d:1d:dc:d0:5d:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=5f145158afa4238add7057a4aca01673330aaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:56:3f:0d:5b:a6:d9:e2:6c:62:a1:9e:d7:
d1:85:e8:11:57:bc:12:43:c1:27:60:a9:ba:c5:76:
a6:f4:19:8e:78:52:d8:33:73:15:d4:15:fd:ed:53:
a3:e0:e4:e5:0c:ec:10:a5:b2:f3:e1:5f:96:fe:13:
4d:df:ef:14:4c:67:cc:aa:8e:7d:69:be:12:cb:ff:
2d:12:5a:52:1a:05:16:aa:ef:bc:bb:89:3c:79:64:
e4:38:6f:48:37:ef:67:05:bd:2d:4b:3d:4d:81:3e:
1c:fe:b3:98:cb:d0:4e:a8:55:ca:9f:62:45:57:87:
d3:0c:bd:86:49:a4:4b:37:44:40:6d:53:71:d4:06:
40:b8:a6:e0:60:27:66:37:d7:5b:05:b2:91:9a:24:
8e:f8:bb:fa:04:0c:6d:f2:ef:41:7f:7f:f6:be:60:
15:cc:c2:82:3a:c0:73:aa:42:90:de:a1:d0:5e:da:
31:74:3f:cd:1f:d7:f0:11:a4:4b:68:2b:58:2c:d0:
5a:fd:e8:d8:58:75:e1:19:40:3c:8c:fc:82:67:00:
d6:ac:83:86:ea:bd:f8:89:d7:39:e0:c8:ae:96:5c:
47:aa:fa:62:05:35:3b:9b:fa:fb:4e:6e:1c:b4:38:
7c:97:34:35:0a:4d:6e:67:48:fd:31:f1:2b:17:2b:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:51:58:AF:A4:23:8A:DD:70:57:A4:AC:A0:16:73:33:0A:AA:43
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:88:55:23:8d:da:30:5d:80:99:d2:b6:62:c7:60:49:60:
2d:0a:48:c2:48:19:45:80:f1:a5:d4:b1:e8:8f:24:e7:43:e7:
a5:5c:a9:01:0b:2c:5c:38:64:69:dd:76:df:5c:99:cc:27:5f:
d9:27:b3:3b:fb:f4:98:ad:cd:6a:c2:04:99:22:3c:95:ae:cc:
8b:54:7c:51:64:e2:36:66:7a:12:95:2d:2e:fb:09:75:0a:28:
35:a5:9f:e4:3b:00:b8:fd:6b:91:a8:46:48:7c:8f:08:ed:23:
7c:89:ed:c6:4d:c6:3e:33:01:c9:52:07:43:c6:d3:09:b1:e7:
12:bb:2e:c3:84:7f:8f:43:8c:fa:ca:ab:65:65:f3:05:d2:d7:
3e:33:87:6b:81:59:33:b7:1a:69:8b:52:4a:e9:53:82:21:8f:
ff:27:1f:9d:49:c2:7e:f8:62:7f:00:03:f7:73:07:99:27:ba:
3d:cb:ce:c3:fa:96:f8:f9:a5:86:a1:59:f9:f8:9e:88:18:44:
3a:e9:8e:b5:12:99:b2:a0:b3:9f:73:df:6f:d2:96:d2:9e:14:
1d:6b:b7:2e:50:d9:44:d4:23:ce:d0:0f:11:78:6b:88:16:bb:
af:f8:90:77:b0:c5:a8:cf:7b:3f:d6:22:b2:12:fe:50:6c:8f:
53:ed:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:44 2025 by rpki-client