Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: HIkbwuQjiCo9tmhVyRAHz+8UH6ZauGGkjX5AZKcLbpo=
Subject key identifier: 0C:F9:D0:47:75:FC:50:8C:3D:AF:C3:0E:11:A0:39:50:37:2F:F8:B6
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 0198A04CFC855A1709EF3C1B6CC7437FE5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0DF5
Signing time: Tue 12 Aug 2025 22:00:56 +0000
Manifest this update: Tue 12 Aug 2025 22:00:56 +0000
Manifest next update: Wed 13 Aug 2025 22:00:56 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: op5U7apA2ataL71MGOTwOdBZJgwZ3EkdOi1dZw+Wod4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:fc:85:5a:17:09:ef:3c:1b:6c:c7:43:7f:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Aug 12 22:00:56 2025 GMT
Not After : Aug 13 22:00:56 2025 GMT
Subject: CN=0cf9d04775fc508c3dafc30e11a03950372ff8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:88:b7:14:c2:e8:37:3b:3d:94:4a:66:08:
64:93:85:e1:0f:73:23:d9:87:b1:8e:20:ec:c1:2c:
43:50:24:fc:e5:83:aa:c8:ca:4a:4e:68:86:b1:89:
09:ac:31:c3:91:6b:37:04:17:92:b1:4b:b5:0d:67:
4a:f3:e7:79:e2:1f:85:46:c4:fb:a8:cb:0b:22:2d:
43:5a:71:59:31:26:22:93:db:47:d9:37:0f:79:d6:
6a:03:43:e3:4b:56:59:f2:79:f6:6f:c8:3d:f4:3c:
bd:8d:eb:61:93:f0:35:b9:7c:99:f1:f9:33:22:fe:
d1:44:8e:e1:69:bf:85:01:ab:87:6d:0c:e8:dc:7d:
e6:59:11:35:fd:fe:97:8e:1e:61:1a:5c:3a:91:17:
03:dc:f8:5f:72:46:e9:3b:c6:45:00:63:62:a9:31:
10:6c:63:15:bf:0a:f8:52:5e:27:c2:12:e9:8b:9e:
dd:90:c7:53:94:e5:42:f8:e0:08:ac:63:c7:29:a9:
97:c1:69:23:64:5e:82:f8:be:47:31:c9:46:cd:b4:
ed:62:8c:1f:b7:ea:fe:7d:dc:51:2e:ad:29:4d:da:
a9:94:8e:25:6d:23:e1:c5:07:e0:6c:8f:a5:1c:bb:
ff:d9:f1:ed:17:97:78:9e:15:1d:f7:07:8f:ee:0d:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:D0:47:75:FC:50:8C:3D:AF:C3:0E:11:A0:39:50:37:2F:F8:B6
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:af:cd:0b:05:e9:95:c2:25:82:e3:d1:91:eb:e5:b9:85:
fb:b2:43:5b:50:91:6c:60:f9:83:7b:7a:11:3e:d8:06:86:6e:
28:fc:a4:8c:b0:fe:a8:66:18:46:a4:db:e3:16:44:d1:0e:3b:
dc:48:d7:bb:45:8c:d5:32:06:51:3f:a8:a9:06:e7:fe:f3:16:
d5:78:b4:d5:31:a1:c7:94:6d:bc:47:a2:da:19:b3:47:a5:f0:
2e:ee:8b:3c:cc:23:a2:55:fc:97:71:54:db:09:3c:d3:ab:99:
52:c3:1b:59:fb:4d:21:41:1c:31:e4:f3:3d:8d:48:48:ea:d8:
e4:20:5c:22:d0:30:9f:37:48:b4:2f:13:b0:fb:b0:af:1f:f3:
ee:6d:9f:06:4b:57:99:ed:56:d5:97:df:9f:74:c4:ec:c0:e1:
99:81:e5:79:06:61:09:65:37:c9:dd:68:38:92:d2:e9:90:e0:
90:a9:16:8f:73:4c:a7:82:93:a1:16:b0:81:4c:8d:12:2a:f7:
87:7d:7b:c6:2c:95:93:73:ce:39:73:43:8e:4d:69:5f:38:54:
55:e5:05:1f:d6:78:51:9b:f0:83:0b:8b:d8:39:89:9c:d8:d3:
8f:36:3e:d1:03:48:cd:d5:6f:00:64:ab:44:d5:f3:73:ef:32:
06:7c:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:33 2025 by rpki-client