Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: Cqr0vWOrrJJnI9aXW6ydJe0grRTDhoMCoPX95iu6VcE=
Subject key identifier: C6:0D:4D:48:DA:6B:43:2B:40:11:86:18:2A:B2:8B:83:0E:55:1D:1B
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 019873E22C3508A9BE38AC689C5CA48CAC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 0577
Signing time: Mon 04 Aug 2025 07:00:58 +0000
Manifest this update: Mon 04 Aug 2025 07:00:58 +0000
Manifest next update: Tue 05 Aug 2025 07:00:58 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: l5yVFK6XbDcTFC8UubU0AhMrmWkYdHzrnwtQfwLbkn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2c:35:08:a9:be:38:ac:68:9c:5c:a4:8c:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Aug 4 07:00:58 2025 GMT
Not After : Aug 5 07:00:58 2025 GMT
Subject: CN=c60d4d48da6b432b401186182ab28b830e551d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:26:54:28:db:7f:ea:0b:64:aa:37:9e:3e:
b8:b1:62:a5:0f:63:62:19:51:73:48:50:ec:c2:41:
38:be:e3:d6:08:13:df:7f:92:55:14:8a:db:82:85:
ba:cc:ff:d6:ed:6b:c5:bf:84:4b:3b:b0:e5:66:5b:
f1:d4:fd:f4:f0:eb:62:5f:68:71:aa:76:8b:3c:f2:
eb:0b:69:7f:51:c5:ce:97:43:ed:19:01:a9:80:c6:
de:5d:cf:42:3f:a5:37:09:f2:5f:65:cb:38:a0:7f:
b7:90:e6:da:61:3d:38:63:7c:c3:75:da:96:72:3a:
d1:9c:f1:c9:e5:20:7b:c9:5b:80:f4:0b:13:8a:bc:
a3:a5:8f:cc:22:d5:d7:27:76:fd:c4:b3:7f:c9:e7:
44:fc:f3:21:c6:00:63:ff:83:c5:9e:32:ec:80:c5:
5d:d0:06:4b:f2:9b:f3:29:ca:23:e3:5a:08:2e:f7:
ec:ef:23:43:16:49:48:99:20:65:95:c3:cd:17:c0:
55:df:db:35:cf:57:c8:e9:f2:f0:99:7b:2b:8e:34:
69:88:13:68:36:05:cd:ec:68:0d:44:c9:8e:24:43:
80:92:d5:02:b9:82:3b:d6:12:d6:59:21:33:ac:59:
13:d8:f1:dc:84:4e:02:bc:f3:ec:0d:dc:b6:da:69:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:4D:48:DA:6B:43:2B:40:11:86:18:2A:B2:8B:83:0E:55:1D:1B
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8a:0c:17:f9:c9:f0:61:6b:92:a5:17:15:88:14:47:c5:e8:
18:7e:18:b4:1b:5c:38:c9:60:c1:78:6d:6f:69:a5:c6:9a:1f:
15:30:b4:2f:ae:c6:d7:c3:9f:ee:17:74:9f:f5:74:22:f3:c4:
6f:07:85:84:1c:39:18:c9:7b:1f:ba:80:5b:ce:d3:12:2b:61:
6e:46:6f:76:57:5f:cc:3b:21:69:a0:43:1a:d8:81:36:56:60:
58:7d:4e:d8:a0:c6:c7:86:78:a9:ba:4c:c0:4c:cc:81:f2:68:
ed:83:bd:f2:73:c8:1e:2f:ce:3d:ba:52:cd:b1:6b:12:98:6a:
fb:f0:fb:a7:41:e6:1c:7b:4f:7d:e9:0f:e8:b3:c6:b4:c6:c9:
4c:73:7b:b9:0c:88:04:0e:7d:4a:ab:ab:24:7f:8f:c5:ad:12:
a9:3c:07:64:a3:de:c2:a8:3b:65:7d:da:bb:22:2f:42:ab:a9:
65:be:92:1c:85:00:92:79:a7:a4:0e:45:20:7e:e7:51:a2:25:
1c:01:2a:02:38:4d:52:d4:1b:20:72:ab:05:ed:c1:c8:77:51:
d1:a0:bb:04:5e:dc:80:bf:25:ed:96:d1:56:6f:d1:3a:99:60:
50:68:f7:a5:f9:5c:ba:23:21:64:e4:e4:ab:f7:3e:ce:0f:32:
e2:71:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:31 2025 by rpki-client