Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: pXSo/rUkK2y0q3ru95JRqSxfQBH+ZLNeKnDqtTc8rXM=
Subject key identifier: F1:AF:97:1C:A9:52:F4:FB:53:00:43:E7:E3:2B:40:D3:10:0A:58:21
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 01976D3DB7C97A37987B402BCEA865CCAEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 1015
Signing time: Sat 14 Jun 2025 07:00:50 +0000
Manifest this update: Sat 14 Jun 2025 07:00:50 +0000
Manifest next update: Sun 15 Jun 2025 07:00:50 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: l16m/pFTsyPf+W1yjZrag8ylHTktbtNIZwTu3zeB0ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b7:c9:7a:37:98:7b:40:2b:ce:a8:65:cc:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Jun 14 07:00:50 2025 GMT
Not After : Jun 15 07:00:50 2025 GMT
Subject: CN=f1af971ca952f4fb530043e7e32b40d3100a5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:f0:9f:46:3f:dc:22:87:b6:39:ea:ec:00:
ff:4f:06:7b:00:7c:ba:1b:d4:89:7e:61:72:9c:ef:
42:60:68:a2:f5:fa:c5:aa:fb:40:a7:1e:f6:9a:ff:
4b:b4:19:52:f5:3f:a0:46:91:3c:76:2d:a0:39:21:
a2:51:06:41:03:48:55:88:7b:ec:97:10:c7:fc:31:
3a:b1:78:a7:d3:53:b4:da:26:56:22:2d:c9:29:b5:
a8:75:0a:f5:4e:45:2e:3c:65:e3:92:66:af:3d:b7:
29:0a:14:4b:2e:d3:12:bc:c0:9d:b7:4a:91:7c:66:
4a:54:e8:91:c7:97:25:23:37:67:25:b6:eb:52:59:
84:f6:01:96:57:d9:77:bf:d8:f7:23:34:2f:14:3a:
a2:22:81:91:0f:70:87:79:c6:bc:e9:f7:2f:2b:df:
56:84:26:c4:39:26:54:a3:9c:bf:a0:18:65:21:12:
c8:bb:1b:dd:9c:3a:6f:f2:f6:ca:c5:20:12:73:b6:
c0:ea:3f:f5:84:b0:08:02:0d:06:54:86:88:36:d4:
6f:57:85:23:16:6f:36:a8:43:d9:98:47:e3:74:07:
71:01:38:84:80:0d:d3:e9:38:33:dc:38:6d:9c:79:
06:40:9c:8e:2e:86:40:9b:40:70:1a:9c:1f:52:5f:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:97:1C:A9:52:F4:FB:53:00:43:E7:E3:2B:40:D3:10:0A:58:21
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:34:f2:15:6f:ed:50:9b:3d:56:5c:7c:c7:c9:ee:d3:4e:bf:
4b:a1:c4:86:a4:df:7d:a7:3c:25:bd:77:74:2e:c3:3b:84:11:
8c:cf:9c:5b:60:7f:10:af:f8:49:13:5a:48:c8:f4:bd:90:ef:
02:96:7c:a5:95:c1:21:8a:f8:04:e2:54:d5:54:03:8f:83:e8:
dd:77:c8:15:8d:19:c4:f0:00:44:6f:70:b1:cb:56:33:3e:65:
9f:a7:a0:4c:0a:e0:ed:d7:32:e4:27:21:53:e3:8b:df:ae:38:
d8:6e:f2:bb:37:20:5b:bc:e3:40:31:b7:42:40:22:2f:d8:fb:
de:3d:be:bb:e4:38:a0:09:ba:59:e8:e7:85:43:94:33:2d:ed:
27:39:f9:b2:da:10:ed:38:cb:9f:b6:8f:72:12:cd:b1:6e:71:
35:67:34:b4:0e:d4:75:ac:bd:f7:f4:ee:84:9d:a8:ff:67:bd:
e8:c4:b1:60:3a:e7:ca:bd:ba:55:6f:16:01:a2:06:5e:8e:72:
2a:f6:41:83:21:93:ac:af:3c:90:9b:aa:e5:41:e8:77:44:bc:
7c:ed:80:97:07:12:0f:e7:f8:d2:2c:c6:90:22:04:9c:38:85:
6f:b1:b6:2f:7e:5d:f0:b3:9b:b0:52:b4:58:ad:cd:c1:95:c3:
85:61:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:44 2025 by rpki-client