
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: 0+xT/GkCl2R3kjtMsTSYULnwJQGOUQDcapP0d0xzt3c=
Subject key identifier: B4:2B:C6:55:77:1B:8A:DA:19:BA:AB:1E:D9:E4:94:6F:DD:22:D0:A0
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019873E200D69C70BC4445CB9942AB6E0DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 07:00:47 +0000
Manifest this update: Mon 04 Aug 2025 07:00:47 +0000
Manifest next update: Tue 05 Aug 2025 07:00:47 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: M+w5+HJIy22nh2+rga5SOXQYtN4W0dgtRVEJZIIT24M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:00:d6:9c:70:bc:44:45:cb:99:42:ab:6e:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Aug 4 07:00:47 2025 GMT
Not After : Aug 5 07:00:47 2025 GMT
Subject: CN=b42bc655771b8ada19baab1ed9e4946fdd22d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:ea:fb:b4:34:a8:fb:68:3b:11:1f:6e:29:
31:c8:2f:28:23:e7:12:b7:c3:aa:a9:0c:37:b0:46:
14:16:cd:19:98:9c:a5:af:8e:2b:5f:ea:7e:bd:27:
81:3c:d8:06:20:42:ca:52:c9:09:dc:b5:7f:06:23:
73:2d:66:ba:bf:54:72:fd:47:1c:87:da:bf:ef:00:
db:40:5b:6f:e7:50:89:42:64:d1:57:48:03:a7:62:
28:4d:d6:21:6f:25:04:ef:16:6e:08:4b:49:75:c3:
bb:bc:a2:eb:9a:c4:72:75:9a:31:fd:03:f6:7e:2e:
d7:e0:89:eb:02:ca:f1:a3:f8:bc:a7:4b:24:4c:6b:
7c:22:44:96:97:83:7b:12:be:c1:51:3a:e4:57:41:
d5:06:d0:d0:de:9b:8c:9c:fd:96:c6:ca:61:8a:5e:
c9:63:af:5e:c1:64:ca:bf:9f:fb:96:dd:64:06:af:
21:dd:2f:e4:63:f9:32:b9:65:7d:f0:43:83:9a:45:
b4:b7:05:29:67:5c:53:af:f7:c8:e9:6a:11:c4:55:
52:f6:4d:86:02:ce:f4:e8:e8:57:f8:c8:16:7e:da:
2f:30:8e:e9:2b:93:11:21:46:1b:cc:73:a0:f2:b4:
e2:4e:2a:ca:c2:78:ae:37:ec:78:28:41:aa:af:91:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:C6:55:77:1B:8A:DA:19:BA:AB:1E:D9:E4:94:6F:DD:22:D0:A0
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a9:f1:12:40:50:1d:d0:6d:84:43:90:db:6e:f8:15:70:2c:
39:f0:f2:c8:76:39:5d:24:27:48:3c:c4:38:80:52:e9:96:aa:
d2:6a:6c:59:53:5f:f4:31:4a:87:ce:6a:8f:9b:9c:c7:c8:42:
b6:39:d6:3e:60:70:45:d7:75:b0:28:29:c6:67:86:98:f6:3e:
90:29:a7:5f:dc:ba:1b:a1:d2:18:be:33:f3:ef:45:ec:53:55:
31:49:19:09:7b:f7:11:55:cb:c1:93:8d:ed:79:ef:ea:73:69:
eb:4b:66:6b:8f:b0:07:f7:00:92:96:76:a5:5f:f7:cb:df:ac:
d3:80:a5:0a:49:a1:18:ae:83:6e:7a:a5:e7:04:44:dc:1b:4d:
dd:09:fc:dc:c8:8b:a4:c0:00:eb:b1:55:d5:d4:2f:e9:c7:ef:
1c:d4:eb:58:b7:ca:29:61:22:a0:db:54:0e:1f:9c:8f:85:44:
59:56:8e:b8:47:a0:bc:9d:65:94:b8:c2:70:4b:63:3e:ed:50:
8a:09:33:2c:de:45:66:ae:14:3a:9b:19:ad:77:81:62:5e:13:
be:ea:c2:23:71:9d:b2:3c:5e:5b:64:76:77:a3:af:dd:b3:46:
f8:32:46:ff:0f:7b:6a:83:40:a1:9f:d4:9c:a6:75:b4:a1:6e:
90:2d:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:51 2025 by rpki-client