Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File: VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier: 8z+eJOGq5sy1bL+WxgsTqKdnJlxLmMqlcYpUC3wcuK4=
Subject key identifier: EC:20:D9:32:3C:84:8F:1A:ED:8C:D7:41:C1:8C:8B:94:57:6C:A0:38
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer: /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial: 0197B745AC6FC8368EDCCB570EB654D8DF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number: 0B77
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: J0FP2qAXRMbf/s+ECYg9D6vhneA9DP55ECVz7gCuKqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:6f:c8:36:8e:dc:cb:57:0e:b6:54:d8:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=ec20d9323c848f1aed8cd741c18c8b94576ca038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:8a:8d:f9:48:a4:43:87:42:a7:c5:3f:20:
15:2c:2c:e1:87:03:7e:a3:d4:ec:80:d4:cf:34:23:
58:56:0c:93:d9:d3:84:41:b6:c9:5f:ed:08:2d:0c:
33:39:2e:76:33:f0:d5:da:00:d8:31:f6:97:f3:5d:
c2:2a:0e:72:b4:08:ec:2a:14:7a:bb:45:ad:a9:a5:
b4:02:de:78:f0:df:c9:eb:00:f8:1f:6d:cc:95:52:
09:89:b8:18:a7:27:a2:de:23:9e:f1:60:62:c0:ec:
8a:f0:bf:58:24:09:4e:7b:7b:12:08:cb:3f:83:ff:
6b:2f:97:73:56:22:e1:f6:80:ee:e7:df:dc:5c:7d:
39:95:13:42:49:a7:a2:b4:67:20:29:20:62:be:c4:
97:04:51:2c:c1:0f:63:3f:c5:42:8c:18:1c:2a:4f:
c0:92:2d:a2:27:8f:51:c1:50:a1:5f:1f:de:2e:48:
c7:7b:0e:3f:c5:f6:1c:70:c2:40:36:af:88:a1:75:
7e:28:36:70:6a:20:9d:07:61:3b:0b:21:d0:99:9d:
3a:79:c3:43:c9:5d:01:fd:9d:39:2e:1d:c1:6e:82:
f0:46:27:21:c5:03:e0:c8:2a:4f:6b:71:e5:82:b7:
90:bd:5e:b0:fa:4a:de:28:48:2b:41:41:03:16:34:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:D9:32:3C:84:8F:1A:ED:8C:D7:41:C1:8C:8B:94:57:6C:A0:38
X509v3 Authority Key Identifier:
keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:67:b1:89:68:85:a0:5d:33:a9:bd:d7:4e:2c:33:9e:db:26:
d2:a4:f3:0b:74:60:52:b8:12:49:8c:b5:9b:49:3d:4b:87:54:
61:58:f8:7c:cd:f1:60:2b:c7:93:c7:e0:16:1c:fc:fd:db:d6:
72:ff:ab:67:77:07:75:6e:f6:d8:fb:c3:58:e2:3d:8a:89:d5:
ad:3a:a2:e4:22:d0:f6:28:0d:3e:77:d9:aa:d9:32:7d:98:a2:
1c:68:3a:cf:7d:35:b2:3f:6f:62:c3:7e:9c:58:02:3e:ad:62:
b2:ce:2b:8a:5d:9a:c8:d2:12:e6:0d:79:c9:ad:e8:b9:5d:09:
9d:9d:c4:7f:ae:f0:2a:4a:6e:62:98:db:1b:57:6d:10:6a:dc:
68:30:e6:bb:05:72:41:51:43:a8:61:42:ca:44:96:7a:4f:75:
36:ba:9c:a1:e0:65:2c:7b:e6:20:13:d2:5c:36:08:16:2a:9e:
a9:d4:ff:a2:d6:4a:7a:d6:ec:ea:22:11:36:94:d4:86:14:bd:
d8:24:2a:0c:d3:2d:ae:6b:2a:89:40:b6:37:89:f4:f5:12:f9:
e4:05:90:3c:7b:a9:37:9b:b1:a7:3b:72:08:2e:c6:37:3f:cc:
ba:75:eb:5a:a7:b8:9d:44:a2:eb:84:e5:7d:3d:ac:7e:4b:d3:
fc:0f:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:34 2025 by rpki-client