Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: lbQ91U3Btzdv/RpVF0/atGhUYxDnEVOVgrZlLDbU7xg=
Subject key identifier: 7D:4E:F1:DC:8F:C2:FB:28:06:74:E3:2E:92:5D:8D:C4:DA:13:F4:71
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 01976D3DE909F50978A2ADADAE546823F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1109
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: s8apEF8wukMZOwNL6x8m0yDtbVzzrlnwZuKGkPiy1bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e9:09:f5:09:78:a2:ad:ad:ae:54:68:23:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=7d4ef1dc8fc2fb280674e32e925d8dc4da13f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:cc:3b:45:88:15:5c:74:af:21:d6:b2:11:
81:d9:a1:8d:e2:ee:5c:35:0e:c6:ff:17:87:58:ee:
80:ae:87:7c:ac:4b:5f:69:55:36:6c:8d:53:44:eb:
01:66:74:ff:08:8c:44:7a:be:e5:a8:ce:f2:cb:fa:
b2:3a:3e:8b:19:36:cb:63:00:4f:bc:53:80:b3:2b:
f6:e4:12:d2:11:c0:ca:59:b8:bc:a6:4d:1d:a6:36:
72:90:46:c1:21:63:ee:32:ae:4e:f8:19:46:3e:bd:
52:f7:20:1c:4c:9a:4e:3c:d9:3f:62:f4:d5:ae:b9:
7a:46:02:ba:ff:2f:b1:e9:ce:e6:cc:7b:b7:b7:f8:
21:39:3c:1f:71:92:c1:f5:88:8f:62:67:90:cc:21:
fe:ff:d8:db:09:b4:c5:2f:03:7e:35:f2:c8:ff:af:
92:2b:c5:ec:b4:d4:37:ea:70:9e:fc:2c:43:79:db:
33:ee:6f:65:79:eb:36:3b:fb:00:b0:8a:ee:15:34:
d6:ef:f0:6c:c7:43:7d:20:b6:df:70:04:58:f1:66:
43:7f:22:ec:25:8f:40:d6:cf:10:d5:58:05:49:5f:
b8:f7:da:29:e8:c9:8f:2a:f8:48:94:c3:74:17:18:
d4:f2:7d:ca:86:d2:62:27:d5:bd:66:e9:97:2b:0a:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:F1:DC:8F:C2:FB:28:06:74:E3:2E:92:5D:8D:C4:DA:13:F4:71
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a1:84:00:72:87:9d:8b:77:56:9c:e5:df:a8:11:fa:4d:7e:
8c:2a:dd:20:04:2e:d6:62:5a:ef:ba:d1:3c:1d:2f:6f:d4:5a:
82:ab:e0:e6:2e:bf:17:81:55:7c:da:56:7d:0e:79:d3:90:2f:
2f:c9:6a:75:d0:62:e0:39:9a:9d:73:af:cf:da:01:37:e8:53:
b9:ce:0e:c4:88:ee:bd:e8:20:28:9f:f4:45:85:21:bc:9e:1f:
49:f6:8d:73:25:e4:b3:c3:a4:d1:ce:3a:52:21:c8:f2:9c:8b:
c3:f1:45:37:e9:00:bc:ed:34:c9:6b:38:c6:02:b6:8b:23:1f:
63:10:ab:21:9d:32:7f:9b:95:75:07:65:67:12:ad:0f:2b:4c:
1b:3a:f2:67:a3:8f:47:bd:37:9e:7c:66:6a:c7:3c:68:9e:b9:
82:9e:80:aa:1e:c8:1a:aa:48:fd:52:70:64:c4:3e:2b:21:9e:
c8:33:1a:bf:43:55:aa:29:69:65:92:85:ac:aa:65:62:05:89:
76:53:a1:6e:3b:c5:0c:af:56:97:a8:32:4e:47:76:70:b0:ed:
29:7d:e7:8c:26:a0:d8:57:54:3a:2b:18:7b:e5:3a:3e:a0:27:
d8:cf:22:a3:83:0f:8c:3e:e2:b1:7a:21:58:38:43:db:3c:41:
6d:a0:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:31 2025 by rpki-client