Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier: kCfLPe7/jp39NUhri+rfOKjUFozzzpgGpTrIxdcmqWE=
Subject key identifier: DA:85:00:C2:AB:2F:F0:4C:E1:43:3E:5F:99:F9:66:D6:63:B5:54:6C
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial: 0197B6A0C243223037BD43035E3A19B870B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number: 0DBE
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: EQdOehqQX9R7j5nztXmmrNueOf7OuXAootP3Ln9oGNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c2:43:22:30:37:bd:43:03:5e:3a:19:b8:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=da8500c2ab2ff04ce1433e5f99f966d663b5546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:bd:d4:4a:e3:48:aa:ff:eb:89:b7:25:15:
aa:c3:47:38:1a:a4:95:05:ae:0c:0d:46:30:ed:a4:
f1:4e:6a:fb:d4:8b:ae:c0:1e:a2:0d:f1:a9:27:03:
ca:21:9b:09:d5:48:a2:26:28:0c:4c:c7:02:cb:7b:
79:39:ea:6f:36:f4:b7:6a:86:d7:02:c7:df:94:6e:
a9:ac:11:1b:30:8f:ca:4d:2d:c4:53:0b:6e:6c:0d:
9e:dd:b8:9a:d8:39:a7:de:03:5e:16:d0:a2:39:fb:
d5:a0:6b:fa:61:89:2c:92:16:d2:df:cc:39:48:2c:
1c:e0:6f:eb:0e:9a:02:48:31:5f:1b:35:8a:5d:f1:
09:09:ce:46:3f:96:5c:71:a5:d6:df:cb:a7:18:12:
36:2b:63:85:9b:26:f5:97:19:5c:28:fe:32:88:59:
5b:f2:19:8c:11:97:b5:ca:50:00:e4:7a:46:54:18:
61:9a:6d:51:19:a9:a3:02:96:07:20:87:9b:f7:ea:
a0:91:bc:71:16:c4:d0:4c:b6:a1:64:20:6b:9f:da:
8f:3e:5e:a2:55:65:46:a5:b8:dc:84:a7:86:2a:fe:
b9:73:be:8a:54:e2:81:cb:d7:42:cb:f1:42:d3:f5:
1f:41:8a:ea:5c:0a:fc:ff:c4:31:f5:d3:6d:44:23:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:00:C2:AB:2F:F0:4C:E1:43:3E:5F:99:F9:66:D6:63:B5:54:6C
X509v3 Authority Key Identifier:
keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:fe:97:67:7d:aa:e5:b2:22:7f:1e:4e:0a:92:0e:07:dd:
6e:e5:54:af:23:44:84:0d:8a:f1:ab:30:dc:73:d5:71:57:d7:
ec:07:42:2c:7d:47:39:f6:80:2c:0d:97:bf:3c:b2:2f:80:68:
05:02:7c:18:87:26:42:36:d7:1e:ae:e2:64:d7:ba:31:82:54:
ca:ed:97:9d:d2:78:93:b8:c9:08:15:6b:c8:dd:eb:2c:53:d5:
91:48:47:b9:29:be:d8:ec:9b:69:c5:57:db:65:d8:c6:82:8d:
12:74:d6:fb:da:89:8f:41:e5:b9:7b:d6:9d:56:ba:e9:b8:f2:
ae:01:6a:82:c1:4f:6c:b3:ab:2f:1d:2d:6a:d1:7f:dc:0b:17:
88:4b:55:27:e6:c8:9e:30:3e:e8:fd:d4:c3:6c:72:e8:5f:43:
01:5d:3d:b4:98:cf:39:e1:78:90:26:3c:95:f3:35:e3:b0:08:
ba:1d:ee:98:e9:fe:14:fa:26:70:96:af:82:19:bb:bb:4d:e7:
a8:f4:dc:f6:a8:2a:4a:ab:34:28:3b:66:70:ba:b9:ab:df:0b:
f0:74:a0:95:06:0d:00:a1:22:59:40:b3:79:05:df:90:de:04:
4f:92:3d:30:d5:41:90:70:d4:5b:c4:1f:91:9b:88:43:41:4e:
09:11:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:34 2025 by rpki-client