Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: hWsVB0QHo7SxKvxb5lfdfKlqX97bgrRmNAIboJOKRUk=
Subject key identifier: 41:DF:B0:75:4C:D8:91:2C:96:71:81:8F:2D:4B:AA:41:7E:05:F3:4F
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 0197B88F5F09D51B0657AFFA06D45CA8F3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 1150
Signing time: Sat 28 Jun 2025 22:01:32 +0000
Manifest this update: Sat 28 Jun 2025 22:01:32 +0000
Manifest next update: Sun 29 Jun 2025 22:01:32 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: Dq3TdTm9HERx2KgwOS47xvo+KAqjxvNLpluGO4xtX0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5f:09:d5:1b:06:57:af:fa:06:d4:5c:a8:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Jun 28 22:01:32 2025 GMT
Not After : Jun 29 22:01:32 2025 GMT
Subject: CN=41dfb0754cd8912c9671818f2d4baa417e05f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:4d:78:ec:be:05:19:27:64:ba:4f:00:3c:
5b:5e:7e:90:ab:2f:43:78:20:51:3d:b3:4d:d2:11:
ac:73:69:5a:68:3a:54:fc:d8:53:36:7b:19:a8:40:
a7:8c:36:01:9a:8c:26:19:c5:70:dc:f0:e8:63:bd:
20:6d:5f:50:c9:47:80:08:76:60:4d:a2:e9:00:98:
58:ca:a3:0b:12:f4:8d:36:1c:6a:d6:d9:a7:99:69:
61:5f:89:02:63:98:da:35:cc:79:f6:e2:3a:bf:eb:
7d:f7:f8:58:c2:34:4d:6b:13:88:cb:f6:74:db:3f:
dc:b0:30:03:53:fc:90:28:1e:34:98:0c:14:6f:85:
2d:36:ce:9a:ab:5f:cf:99:5e:1b:70:6f:43:63:aa:
96:99:4e:60:98:5f:7c:d7:1e:82:42:50:e5:dc:7e:
b7:73:f8:dc:25:ee:d8:43:b4:2c:3b:9b:ac:e4:6f:
e3:55:1e:29:b7:66:99:7a:34:45:ce:21:f4:93:88:
d9:8e:d5:13:a8:3d:31:af:dd:34:42:b7:f3:36:5e:
60:53:82:49:fe:59:ca:be:92:10:fd:de:0d:65:bd:
fd:23:76:93:4c:0a:91:a8:27:a1:bb:e8:61:7a:ac:
22:45:73:09:c2:a2:64:5b:67:f1:83:5c:c4:29:72:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:B0:75:4C:D8:91:2C:96:71:81:8F:2D:4B:AA:41:7E:05:F3:4F
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ed:da:a1:c7:9e:dd:d0:c4:57:8f:62:43:c5:f1:36:41:ef:
56:58:ce:8d:cb:ec:c0:5c:2f:cc:9b:b1:7c:8d:19:ee:d7:56:
60:41:9d:e1:8d:04:05:dc:3e:35:d3:f3:dc:1b:b7:5c:62:dd:
1a:e9:d6:87:dd:53:f0:3c:3d:06:04:3e:4c:a5:4e:bb:9a:f8:
35:94:2e:c7:8d:df:b0:90:c7:da:85:64:ce:fa:a2:87:b8:2e:
ac:01:38:7e:0a:15:8a:bf:59:0f:61:0b:3e:da:5f:3b:0f:85:
21:9b:c9:c9:97:42:68:9e:05:92:95:89:5a:14:57:31:8b:a2:
66:7d:fa:14:9a:4f:2e:ff:66:05:a6:3e:e0:7f:4b:bd:8d:17:
e5:80:4e:57:de:68:c8:71:b6:c9:15:6d:d4:2f:11:ff:6b:2f:
ed:e9:c0:40:ef:e7:cf:29:9c:b2:82:be:f8:4e:5a:1f:dc:25:
6e:3b:0a:d5:fb:39:3b:7f:44:07:94:61:a7:96:9f:6f:5e:e4:
61:dc:88:6e:a9:00:f3:3b:8e:df:da:5e:90:e0:b5:36:a5:bf:
07:2a:04:7f:3c:f1:a2:4b:c6:9c:c1:dc:55:3a:8f:8d:48:d2:
2f:48:67:75:d1:7f:c5:1a:9d:83:1d:1c:37:48:29:1e:ea:11:
66:47:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client