Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: vgFuaA27WbqyU7MI/gX5CM1Wb2/NrblhIphmXvQmH4M=
Subject key identifier: 4F:EC:33:4B:0D:74:B7:C3:84:88:44:94:6D:33:48:B9:F5:69:2A:DC
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 019779AF452386AC848AB3B62677DC6C49CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 0206
Signing time: Mon 16 Jun 2025 17:00:18 +0000
Manifest this update: Mon 16 Jun 2025 17:00:18 +0000
Manifest next update: Tue 17 Jun 2025 17:00:18 +0000
Files and hashes: 1: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: O/68Wi6adytCj6WP2AzDqQb/PGfQOexVY/tgNOzUorE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:45:23:86:ac:84:8a:b3:b6:26:77:dc:6c:49:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Jun 16 17:00:18 2025 GMT
Not After : Jun 17 17:00:18 2025 GMT
Subject: CN=4fec334b0d74b7c3848844946d3348b9f5692adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:aa:e6:4c:34:15:f3:32:d6:bf:c0:6d:fd:
10:5c:aa:45:40:35:92:99:ff:06:2e:90:77:36:e3:
65:95:de:f7:cf:c1:20:bc:1c:76:44:a1:ca:82:0a:
b6:b0:fc:6b:27:52:93:d4:c3:ab:2f:93:51:8f:04:
c7:45:7f:1e:aa:9c:9b:4c:9d:f7:be:37:e5:12:20:
b5:19:3b:00:76:14:7e:13:0c:df:69:6d:48:26:d2:
d1:d0:40:7c:58:ad:d7:09:92:a7:89:49:ec:43:27:
2d:c1:73:21:69:8d:ba:31:62:20:09:53:13:6b:e9:
49:95:31:d3:94:e3:07:af:85:54:b8:58:87:68:0c:
85:cf:35:6f:25:42:1d:66:4f:92:00:1e:19:76:1f:
12:b2:b4:60:ce:ba:f5:52:47:3a:6f:4c:88:76:79:
e0:27:43:c8:ac:10:01:65:2a:62:a1:80:df:23:db:
e5:6d:80:83:46:fa:7e:37:91:ff:cd:b3:c2:cc:fa:
e1:cd:7f:50:2a:a0:98:15:e4:fa:c8:60:73:04:aa:
4d:12:a6:fc:73:53:6c:12:04:b1:19:83:ea:7d:ec:
83:a1:a8:13:dc:05:d6:22:85:1a:bd:aa:23:29:58:
36:80:14:6c:07:f9:21:1a:90:d4:49:d6:d7:cc:3a:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:33:4B:0D:74:B7:C3:84:88:44:94:6D:33:48:B9:F5:69:2A:DC
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:fe:ed:c4:c2:bf:f4:cd:1e:ab:de:a5:53:14:6b:5f:b2:
c5:c1:e9:18:08:7d:1a:74:ef:1c:65:56:84:24:27:ff:03:24:
54:01:a8:fe:8c:89:22:fe:a7:62:27:b2:be:e5:72:d7:ca:cb:
ce:ed:db:23:54:5a:e6:0f:44:81:b4:0c:f8:cd:a1:d7:28:e8:
cb:fe:8c:56:7f:4f:de:cf:f7:c4:d9:74:79:3a:56:24:c6:2d:
49:6d:36:cd:a9:c0:85:9b:59:d5:e6:fe:e5:d1:17:5a:f1:9f:
86:bd:f7:85:d5:a4:ce:3d:b8:01:15:96:b4:c1:85:21:d6:99:
c0:77:63:77:59:b3:ef:df:d4:5c:46:f4:22:43:a8:0e:d3:16:
59:d5:34:b0:af:77:7b:94:24:75:00:1f:ce:12:84:3b:5e:5b:
1e:2a:74:cb:28:ec:b7:b3:6c:a6:7b:0f:ea:3a:6d:3e:5f:3b:
b8:23:ef:c8:76:64:34:24:74:50:8c:3a:cf:ad:1c:20:6b:67:
3a:9f:5b:9a:99:a9:9c:62:91:5f:1d:81:69:e7:b2:fb:cc:c2:
21:12:7c:ee:49:42:04:ef:b5:29:71:ad:c6:9d:50:a8:bc:f6:
00:22:4b:0a:89:aa:29:e2:b7:38:d4:90:89:b5:b7:cd:e9:9b:
3a:4c:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:09:50 2025 by rpki-client