Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
File: VmczL0gJQe01gDssBLhPNyjTkpc.mft (raw, json)
Hash identifier: kr/tV3ONRsiTtMnyIUdap8K1hEHzJInV2gUdO2pbTqc=
Subject key identifier: DD:14:68:A4:CD:81:72:1B:55:AC:94:9C:96:26:09:B4:34:9E:66:47
Authority key identifier: 56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
Certificate issuer: /CN=5667332f480941ed35803b2c04b84f3728d39297
Certificate serial: 01987298D6DA51E6D31EB5690F1BBA45D20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
Manifest number: 07
Signing time: Mon 04 Aug 2025 01:01:15 +0000
Manifest this update: Mon 04 Aug 2025 01:01:15 +0000
Manifest next update: Tue 05 Aug 2025 01:01:15 +0000
Files and hashes: 1: VmczL0gJQe01gDssBLhPNyjTkpc.crl (hash: pOOVrUmQmqjPujcC2BtURh5PBm1weK7TdcrA3OVjjiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d6:da:51:e6:d3:1e:b5:69:0f:1b:ba:45:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5667332f480941ed35803b2c04b84f3728d39297
Validity
Not Before: Aug 4 01:01:15 2025 GMT
Not After : Aug 5 01:01:15 2025 GMT
Subject: CN=dd1468a4cd81721b55ac949c962609b4349e6647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:58:2f:4a:97:c0:e3:32:ff:1c:b4:dd:8f:
e0:d6:d2:fb:a2:54:6d:89:df:f0:e9:97:ec:2a:48:
1b:bf:da:23:78:0f:b0:46:6f:c0:22:da:1f:f3:73:
cc:90:a1:42:be:67:ab:a1:d0:35:c2:9b:e8:d0:ff:
69:96:48:d7:3e:5e:93:53:1b:3e:0a:ce:c9:11:dd:
4f:2c:92:31:8c:40:a9:24:92:c8:1c:81:dc:e2:00:
be:b1:29:d6:68:fe:94:58:bc:03:26:8e:ab:63:31:
b2:66:d5:a0:57:0b:75:3b:5b:99:f0:17:d6:1b:1e:
d9:b1:19:ce:30:0d:21:da:33:69:75:7f:23:ed:8c:
50:a6:f3:e1:fb:81:75:36:84:d4:91:52:27:11:50:
b0:be:f7:3d:23:f0:b6:f9:f4:37:94:71:d5:1e:6d:
73:de:a0:9f:69:fc:94:04:bd:27:4b:02:5c:83:93:
1b:a7:b0:02:67:0a:6f:08:2c:9a:ce:8b:a4:1f:25:
d3:12:ed:25:28:67:3b:cd:66:8d:e4:fb:45:7a:e5:
f8:b9:f7:18:95:0e:a5:77:e0:19:b6:f7:b4:b6:61:
b5:9f:5e:d9:bf:b0:5a:58:79:2b:74:ee:15:32:b6:
a5:8a:f0:e0:e0:e4:33:0b:e1:76:a7:78:f5:c3:0d:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:68:A4:CD:81:72:1B:55:AC:94:9C:96:26:09:B4:34:9E:66:47
X509v3 Authority Key Identifier:
keyid:56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:86:f2:61:be:79:1f:2c:1b:3e:be:4a:5c:13:48:ed:d0:
27:ff:ef:c1:ae:2a:83:b4:1d:d3:7e:2b:05:91:1b:9d:36:5c:
57:32:21:64:01:7e:ac:63:d9:8e:ed:79:1e:e6:4b:98:43:21:
c7:29:36:f0:b0:d4:65:d1:74:a7:7a:6b:f0:37:8e:ab:10:a1:
95:07:89:a2:9a:e9:f1:73:55:01:f7:a6:87:32:cc:92:c4:ee:
5f:d5:63:56:62:15:59:61:c7:d8:da:03:67:d7:6e:36:9a:5f:
97:3c:80:6d:c9:69:9a:ad:e3:a5:df:f4:c0:35:b5:74:ae:24:
e8:c6:82:67:29:71:17:e1:1d:3d:94:d9:1f:9e:ce:b1:28:45:
58:2c:a7:7a:08:ff:c7:60:be:d1:df:fb:e9:ce:83:30:31:28:
ca:67:5e:d2:72:52:43:3f:01:9a:a7:6c:09:4e:7a:c6:e6:cb:
16:95:1d:fe:bc:81:4d:9a:80:3a:9e:3e:0a:3f:7c:0a:26:69:
e8:8f:c6:49:93:4c:68:eb:4b:08:e3:99:8d:d4:46:e8:41:c9:
30:18:b9:9c:c0:2d:d9:fc:fd:ec:18:90:b8:b1:53:da:e2:cd:
be:06:97:c2:ca:b5:04:bd:90:05:ea:2c:6d:2e:c8:7d:62:3c:
08:85:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:16 2025 by rpki-client