Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: OAvjeL2IZfNIzGyY620AdafaCYaO/oa9kCkIKbNdIgs=
Subject key identifier: 45:C4:C2:F2:22:FE:13:73:00:16:95:42:B3:07:F0:57:92:8E:26:35
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 0198733D693D022954C58A1AFD940A0D31F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:01:00 +0000
Manifest this update: Mon 04 Aug 2025 04:01:00 +0000
Manifest next update: Tue 05 Aug 2025 04:01:00 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: dsnn4N9IMgqk6wVTl4kpIQx2gFlRP+qp4772KD0pvLc=)
2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:69:3d:02:29:54:c5:8a:1a:fd:94:0a:0d:31:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Aug 4 04:01:00 2025 GMT
Not After : Aug 5 04:01:00 2025 GMT
Subject: CN=45c4c2f222fe137300169542b307f057928e2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:68:30:6a:86:6c:bc:81:e1:c8:03:4d:fb:
03:1f:19:9a:d7:b1:a4:aa:f7:4d:9d:45:56:0e:ec:
f1:de:58:31:d0:cb:b3:a3:07:a3:da:46:42:e7:a7:
1d:48:1f:c7:71:50:23:75:dc:66:41:74:a1:3d:eb:
93:54:2d:1b:fd:e0:a4:1a:fa:bf:67:30:32:c8:87:
37:3e:f7:ee:02:ba:70:17:2a:ec:30:a2:0c:56:d0:
27:f5:4a:e6:55:2d:4e:34:92:51:bb:2c:b4:85:a9:
62:c3:17:4a:e9:6f:2f:b6:7f:82:88:86:96:86:2e:
b6:1c:7b:c6:16:4f:ca:e5:b2:8e:b0:e4:e9:3d:4e:
06:df:2d:85:d9:af:f1:70:0b:2b:bd:23:14:0b:4f:
82:86:01:1f:0b:8b:3f:d1:1e:8d:b6:e5:10:b1:87:
7a:6c:9b:07:a3:ca:6d:da:d7:fc:fe:72:fe:72:53:
8c:bd:44:04:c2:43:94:0e:0b:c0:36:cb:1f:53:9e:
2a:98:47:34:56:4c:44:58:58:45:8b:f7:47:d4:72:
08:b9:d9:72:a2:40:08:13:e0:ff:10:2b:4e:6b:47:
ab:80:bf:0b:31:9c:53:4d:5b:11:a8:51:f5:b4:a6:
16:17:fe:b1:b6:1a:6c:4f:5b:98:c7:4f:b8:a5:77:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:C2:F2:22:FE:13:73:00:16:95:42:B3:07:F0:57:92:8E:26:35
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7c:bc:5f:0c:a1:40:6b:8d:01:ad:81:1b:15:f8:72:06:4b:
61:47:8d:78:fe:a8:32:ed:86:a6:6a:28:95:e0:b7:7a:0a:4d:
1b:0f:45:30:41:39:b0:2b:35:4e:8c:0b:a5:3e:8f:72:fa:3f:
a5:01:16:f2:9a:da:89:9c:b2:08:0f:15:ba:11:e4:b6:13:15:
81:ae:2d:98:d3:69:6d:cd:01:63:2b:ca:86:30:89:9d:ae:ad:
45:91:88:19:ff:50:6f:a1:bb:5f:b4:03:84:1c:2d:67:19:28:
56:ec:c3:a5:e0:63:cb:64:c4:6d:2a:10:60:62:53:2c:4d:71:
71:89:f1:7c:8e:8e:31:ef:6b:99:65:88:10:2b:94:cc:c2:b4:
05:3a:74:25:36:39:74:e8:f9:5f:64:dd:f9:9d:55:96:64:1b:
c3:48:50:18:c4:7f:ff:74:87:07:d2:98:d1:09:3a:ac:05:12:
30:f1:03:2a:b8:65:04:23:d6:e0:c3:17:e9:83:8d:fc:c5:5d:
4a:a0:e9:49:d8:ab:0c:a0:11:09:90:37:40:f1:62:ae:1d:cc:
e2:44:a7:fe:b5:df:cd:d0:65:e8:4e:d6:84:f2:be:28:29:43:
2a:b1:de:86:fe:f7:49:1d:a9:f9:33:2c:5d:6f:ae:12:ab:fd:
1c:5a:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:03 2025 by rpki-client