
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: X5pd/AS+LJa/0nH+x7Yjwm9OAkNgDrfbG63YGC9YwX0=
Subject key identifier: 5C:63:58:E3:83:BE:47:D9:B0:97:84:B8:86:56:14:24:E3:6A:6A:93
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 019873E33F21EA5B61851FEF912EF9F7B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:09 +0000
Manifest this update: Mon 04 Aug 2025 07:02:09 +0000
Manifest next update: Tue 05 Aug 2025 07:02:09 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: 2pzK33axzHGjrnFFhTbkOYj2taoEASyhxvZP62ACKEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3f:21:ea:5b:61:85:1f:ef:91:2e:f9:f7:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Aug 4 07:02:09 2025 GMT
Not After : Aug 5 07:02:09 2025 GMT
Subject: CN=5c6358e383be47d9b09784b886561424e36a6a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:53:0c:1b:4f:3e:cc:6f:80:1c:3b:be:a9:
42:79:c0:0f:88:eb:29:cc:df:b9:81:9a:a1:64:e1:
fe:91:2c:1c:6d:3d:63:af:07:53:46:e5:22:ee:17:
9b:da:2e:59:43:0b:03:c1:22:14:49:f1:fb:ae:d1:
91:9f:d3:a8:74:82:f3:fe:14:ad:e0:62:a7:d6:e2:
68:63:cb:45:8e:c9:98:87:41:44:81:4e:f3:a0:92:
35:49:7a:25:1c:da:87:29:1c:8d:bc:f2:1b:2a:d4:
c8:64:2b:b7:88:ac:c5:8f:74:7a:e6:ad:13:68:0a:
5c:e1:65:42:67:76:0c:47:38:aa:c6:a8:c3:cf:8c:
c5:c3:1e:b1:ca:39:cc:3a:29:3e:ed:7d:e1:70:2b:
68:8e:54:a8:63:52:c8:41:52:9d:81:db:aa:91:fc:
15:38:36:78:51:c2:13:47:12:c1:ae:6c:fe:9f:7c:
07:4b:ac:c3:a9:64:37:27:ca:b1:aa:f4:59:19:cf:
81:65:5b:b9:a1:62:86:6f:de:5e:d3:39:84:de:b7:
d9:b0:a1:f8:44:cf:d2:65:71:67:40:7b:d9:ef:5e:
3c:69:79:96:18:be:4c:6d:25:60:0f:c7:89:76:e1:
5f:aa:af:4b:62:c2:01:87:a2:cc:22:46:67:d5:a5:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:58:E3:83:BE:47:D9:B0:97:84:B8:86:56:14:24:E3:6A:6A:93
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:7a:dc:38:af:c8:d4:fd:59:81:8c:57:f5:2b:2e:3b:46:
7d:c8:f0:05:b0:f1:92:02:58:7a:ce:e8:52:17:fa:2a:1b:27:
6d:e1:08:47:2e:16:2b:de:52:1f:70:8a:55:90:db:02:42:72:
aa:8b:94:b2:65:08:3f:fe:d7:26:c8:cc:33:19:02:93:9e:b4:
11:7e:05:18:97:65:30:d7:27:33:9f:dc:a3:99:7d:6c:1a:f5:
a6:b0:79:b0:26:d2:b4:48:0c:bd:6e:fb:70:44:85:f4:b3:77:
cf:6d:e9:cc:9f:18:5b:ba:b3:e0:73:5f:d9:91:78:91:01:36:
6d:6f:70:18:36:87:bb:c6:e1:db:61:3d:6c:ab:62:a7:76:d4:
60:e0:f6:20:44:76:ca:82:67:e8:75:e1:6a:9d:f9:84:6e:26:
cd:b8:56:8f:eb:d5:3b:c0:75:4c:83:d3:bb:a2:b3:ca:be:e8:
34:2a:1c:1a:16:71:b5:b7:97:a4:90:1f:e1:47:b6:7d:7f:63:
10:f1:56:48:8f:f1:4f:53:6d:27:6e:49:53:eb:e2:47:27:9f:
3e:9f:04:b0:97:6b:e7:13:b3:60:9d:4e:65:a0:84:88:52:6d:
27:35:12:8a:ae:4f:fd:a4:9c:93:83:12:a7:9d:f6:ff:51:65:
a1:c0:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:45 2025 by rpki-client