Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 4QHODkgMlb+l6fxYZ4PG2pNQBM7WMrb1SgjmVGItwxE=
Subject key identifier: BE:0A:7C:F3:C0:D4:22:D5:CE:E2:6C:00:A4:22:6C:12:CE:86:BC:24
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019879AEB346CDE50BD608B77DDFD3C6FA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 12EA
Signing time: Tue 05 Aug 2025 10:02:28 +0000
Manifest this update: Tue 05 Aug 2025 10:02:28 +0000
Manifest next update: Wed 06 Aug 2025 10:02:28 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: vgY6RVfcsbHq8y1PiHZbc4wg9/yMuFysr/rErFiNCAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:b3:46:cd:e5:0b:d6:08:b7:7d:df:d3:c6:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Aug 5 10:02:28 2025 GMT
Not After : Aug 6 10:02:28 2025 GMT
Subject: CN=be0a7cf3c0d422d5cee26c00a4226c12ce86bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:93:44:bc:63:a7:c7:1d:f7:7c:cb:4b:32:
d3:09:77:55:1b:81:6a:54:74:cf:86:93:0f:2e:80:
1f:40:97:38:2f:83:c8:69:ab:1f:88:4c:bf:9d:12:
17:f7:7b:b5:df:8f:7a:dc:dc:7a:9c:c1:49:70:82:
1c:56:4e:bb:39:8b:66:2e:f7:13:d3:20:d8:9a:7e:
f8:2b:35:f2:59:74:a9:bb:3f:5a:3e:46:4f:bf:21:
ac:29:69:80:ef:9f:23:a4:3a:b4:e4:82:8e:f4:cc:
62:e0:4b:31:c0:39:30:74:a5:40:84:26:a7:1c:93:
90:29:b0:2a:92:dc:e6:a1:37:2a:a1:9a:32:90:10:
68:67:be:d6:16:13:2f:78:c2:60:3e:e0:04:35:1b:
5e:99:6c:e9:bb:e1:bb:ec:02:e2:c7:3e:c5:44:b4:
a6:df:41:43:24:0f:bc:2a:7c:49:79:6d:8f:ad:4e:
15:27:e0:51:ef:46:4e:c1:6b:fc:6d:5b:84:65:c5:
1c:b5:67:77:6b:66:ea:8c:00:69:c0:01:10:ee:08:
97:14:72:fc:fe:58:7e:6e:14:28:b2:74:26:48:50:
e7:f9:07:24:f6:85:54:b3:e0:d1:ee:d1:e1:af:7d:
6b:6d:54:81:99:be:97:8e:a0:12:f5:77:b3:e9:01:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:7C:F3:C0:D4:22:D5:CE:E2:6C:00:A4:22:6C:12:CE:86:BC:24
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f5:a2:20:15:be:b6:64:4e:97:78:3a:7b:9d:33:9c:bb:2a:
dc:da:db:2e:bf:f8:f1:9d:9f:e8:05:02:df:ba:17:1d:c4:2b:
8e:e3:14:f0:c2:23:e8:ae:62:03:8f:6b:21:15:88:f8:ef:14:
f0:66:1b:0b:86:f9:62:74:2d:5f:60:a4:cc:96:d3:01:aa:ef:
c8:8e:54:8d:e6:59:c6:f4:62:f8:e8:80:28:87:02:c0:29:ae:
92:b9:72:06:fa:7e:e6:b7:cc:9e:67:be:27:9a:eb:c6:0f:45:
ba:66:85:bb:a3:c5:9a:93:26:07:72:0e:30:47:45:a7:6a:8b:
48:d2:3a:bf:8c:51:27:a0:d7:a4:27:9f:9f:81:f5:03:18:74:
cb:25:04:58:92:d0:8b:98:df:88:28:36:0f:42:11:6e:ae:b5:
02:a6:aa:92:6a:ec:75:8b:e5:2f:5c:29:6f:3e:8c:52:7b:cb:
49:52:57:b6:a5:b7:e9:c8:7e:1a:4e:59:96:3f:6d:c2:e7:b6:
cd:05:4d:53:1e:67:3c:69:97:bc:9d:da:a8:53:3f:b8:bd:41:
d8:25:b3:44:1c:32:b3:d1:d0:77:08:43:53:ce:69:ca:53:7f:
02:1b:64:41:af:30:69:81:6c:0b:58:5a:91:5a:2d:58:fa:f9:
57:e9:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:12 2025 by rpki-client