Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: sKwS9yg1dbmrs9l6rzhJCSbxXpxe/mWVNyarKx//9kE=
Subject key identifier: C7:98:CB:AA:CF:9C:19:2B:F2:10:99:21:9F:AF:93:73:A8:62:49:3F
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 01976D7455DFE1093EDA8267D53C7A1EA803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 0235
Signing time: Sat 14 Jun 2025 08:00:30 +0000
Manifest this update: Sat 14 Jun 2025 08:00:30 +0000
Manifest next update: Sun 15 Jun 2025 08:00:30 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: bOCk5B7McgNnwAuDvOFbZONRdPiIAQKBS74OeXy1Vxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:55:df:e1:09:3e:da:82:67:d5:3c:7a:1e:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Jun 14 08:00:30 2025 GMT
Not After : Jun 15 08:00:30 2025 GMT
Subject: CN=c798cbaacf9c192bf21099219faf9373a862493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:02:5c:8e:9e:4e:68:79:12:e2:c3:e4:e2:
fe:3c:6b:a5:e7:79:25:b2:ee:c5:e1:47:2e:20:5f:
ec:74:b6:3b:fd:14:7f:99:ee:8b:e9:c0:b2:c6:1e:
51:38:c8:a6:60:d5:a2:31:d8:c3:e1:72:b0:a8:d9:
e2:8a:66:78:3d:d5:77:5a:61:9e:3e:17:c0:74:88:
5d:7c:b9:c0:d1:80:46:98:e6:5a:0d:0c:31:e1:2b:
42:89:1c:0f:c6:c4:2d:9b:db:9a:82:02:b9:eb:00:
77:e9:da:25:f3:6b:5d:d6:2d:9f:d4:30:5e:10:54:
2a:72:08:d9:84:1b:70:8b:c4:fd:7d:de:7c:6f:20:
94:02:e8:f8:24:ca:86:35:72:e6:b5:5f:38:d9:a7:
f5:32:fd:40:0a:a1:62:1c:cb:59:8c:26:e2:97:e9:
21:40:5a:e8:bf:50:4d:d0:87:f6:4b:f5:8f:53:23:
fd:ac:59:da:89:22:07:da:61:da:c0:04:97:f0:4c:
f8:93:b3:36:f0:f2:e0:69:05:b6:64:b4:83:0a:c9:
d7:6c:69:b5:be:33:90:3a:db:82:b1:55:15:5c:a6:
cb:be:ce:15:e9:d1:f7:b9:4d:7a:59:19:9e:01:b5:
fb:15:ce:fb:50:81:5b:f4:95:01:5d:ed:7c:6d:81:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:CB:AA:CF:9C:19:2B:F2:10:99:21:9F:AF:93:73:A8:62:49:3F
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:a6:ff:42:54:b1:31:8f:d7:9c:3c:19:b9:44:30:3b:a7:
52:dc:9d:ef:9f:c8:70:96:14:29:70:b6:1c:e9:da:21:86:04:
d0:d0:86:8f:cc:a6:4b:c6:94:da:12:fb:b4:74:69:27:63:28:
eb:58:77:95:2c:ab:bd:be:45:2d:a7:c3:0a:bb:53:e9:0d:a3:
e2:fe:ac:14:d0:32:a9:97:e7:c6:2e:a1:e4:e5:96:fe:e2:f6:
92:fe:f1:5c:84:ae:99:68:55:0e:72:90:18:4b:6a:d8:f3:74:
62:95:c1:d1:09:40:62:31:ad:20:30:1c:4c:ba:69:7c:7b:b0:
ee:10:58:b7:ca:fe:62:c7:5c:c8:84:2e:bc:2b:42:82:64:02:
da:c6:14:5e:af:4a:4d:ae:0e:87:86:33:db:bc:5e:c1:10:16:
f1:b8:c6:60:6f:b1:7c:51:20:47:b4:8a:ae:1c:e3:56:b4:2a:
5d:d0:a0:a8:25:dd:31:51:96:22:cc:8f:04:9e:94:6f:a2:69:
8a:aa:f8:4c:0e:ad:cb:19:91:14:c0:5b:47:01:55:a0:bc:fc:
79:8b:25:49:0c:4e:a1:d2:b4:4a:1a:d9:85:d1:ab:14:d0:42:
e7:a5:0c:49:dc:12:b0:00:62:47:26:e8:ac:68:46:8d:03:ab:
6f:04:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:38 2025 by rpki-client