Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier: COuOHrHll8fDqE2YxIXZKlqjF2l39BDfHNlVDISpmVo=
Subject key identifier: 8E:53:03:43:CF:C3:E1:7B:4F:0B:D6:63:65:AE:6D:3E:97:45:14:F1
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial: 0197B77C06B0E76991B2988B2D7C42B21782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: Bjp9QS0fPJOYe4EuekHuIoh3iGa5MOdQfhS7aqzlm9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:b0:e7:69:91:b2:98:8b:2d:7c:42:b2:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=8e530343cfc3e17b4f0bd66365ae6d3e974514f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:70:94:24:ea:53:40:97:86:cd:31:b3:6b:
ce:e3:aa:e2:9f:1c:01:04:68:b0:dd:0c:88:20:5b:
d3:68:07:e5:e4:47:ae:77:3f:3f:61:bd:37:16:4a:
9f:64:f9:99:01:d4:a6:bc:0e:47:07:ee:32:c2:f9:
48:8e:1c:8c:76:6d:25:ae:c7:52:a8:61:6f:c4:ff:
f2:97:12:28:a8:2a:a6:f1:2d:2d:c7:9d:70:00:e6:
b1:18:d8:bc:82:18:34:f8:63:d2:52:30:e2:0e:16:
e3:4b:df:18:e6:b5:cf:6b:e2:96:ec:88:32:fd:32:
c5:55:70:57:48:2a:2c:1a:89:56:1b:fe:cd:2f:16:
77:60:41:02:ef:d0:bd:0d:96:84:c8:fa:bf:ca:4c:
6c:29:ce:04:52:fa:c5:91:52:12:33:b5:e9:8c:11:
44:15:44:5b:ad:70:01:ee:64:0b:ad:01:3b:10:59:
43:0f:bc:b0:79:80:16:96:bd:69:26:e3:cd:71:c6:
44:16:b3:bb:c0:b1:07:e8:6f:4e:9b:9a:ba:9e:b4:
46:60:a5:b5:14:8c:22:79:32:20:87:01:a7:07:06:
32:37:c4:17:5c:7e:22:14:aa:22:55:ec:fd:ef:12:
8e:21:2a:fd:e3:f4:f0:96:35:ac:b5:23:ff:9d:d1:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:03:43:CF:C3:E1:7B:4F:0B:D6:63:65:AE:6D:3E:97:45:14:F1
X509v3 Authority Key Identifier:
keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:f2:85:02:21:cd:6f:68:72:a7:a9:e0:28:e7:a9:1f:63:
f2:3f:9d:72:fa:1a:50:01:0e:99:d8:79:f8:1c:a6:dd:84:c9:
6b:a5:2c:94:d1:1f:2f:d9:86:8d:0f:b2:74:d7:52:b7:c1:bb:
90:38:66:00:1d:c5:58:b0:9b:c3:97:1f:48:8c:f1:63:f9:c2:
61:99:78:a7:a5:f7:4c:e7:66:51:3c:ba:b8:b2:f4:91:f3:3d:
6b:f7:d4:70:4f:72:ad:f2:6b:93:ef:77:66:3c:59:c2:32:6a:
3b:01:1b:64:15:4d:16:ca:4e:bc:76:a6:4b:33:b2:1a:55:a7:
5c:41:04:e9:93:63:c7:c9:6f:56:1c:59:b7:f4:ec:a7:d5:8f:
11:cb:1a:d3:ba:40:5f:f9:d9:5b:cd:3f:21:c1:93:c9:b4:b0:
22:fb:68:fc:9d:66:63:93:c5:63:65:3d:d9:a3:66:2f:d0:ff:
be:f8:2f:bb:c9:5b:3a:98:12:1b:fc:cf:6a:f5:d5:26:6e:a7:
fe:f6:ab:7c:a9:91:80:25:46:c8:c3:f5:fb:a6:ce:a5:00:93:
d5:32:24:da:b9:22:82:f9:c5:26:fe:16:72:eb:52:4c:5a:8f:
c8:45:08:4b:43:2c:cd:b2:e9:ac:7b:4f:5c:fc:ec:72:6a:b7:
71:e4:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:27 2025 by rpki-client