Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: 9mkiKC9K4OcJ7rBkfu9ClwFPJpJLJiP8+k6AMHcjMdo=
Subject key identifier: 5C:2E:B0:AF:E2:8D:93:0D:75:BE:DB:C3:BB:49:96:4B:23:25:99:51
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 01987BD279B978D15DD7C959F033DE162616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 02C1
Signing time: Tue 05 Aug 2025 20:00:47 +0000
Manifest this update: Tue 05 Aug 2025 20:00:47 +0000
Manifest next update: Wed 06 Aug 2025 20:00:47 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: SkDDjZgwwmsd3TpDKfmONTO/lXktmzbzeBrHowOx2TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:79:b9:78:d1:5d:d7:c9:59:f0:33:de:16:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Aug 5 20:00:47 2025 GMT
Not After : Aug 6 20:00:47 2025 GMT
Subject: CN=5c2eb0afe28d930d75bedbc3bb49964b23259951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:3e:0b:fa:7e:a0:d0:29:38:89:cd:6e:51:
cb:7b:71:20:33:e3:8b:9c:ae:55:0f:61:d3:05:51:
f8:3c:d7:ae:c4:72:b5:b0:0d:56:d6:4e:a8:34:b3:
c8:27:13:b2:1f:ae:c2:cb:af:3f:2b:46:e1:94:f8:
69:55:5d:6a:2f:53:19:47:20:fb:19:14:b5:bf:a0:
27:1f:f2:ce:f7:05:43:9e:19:c6:0c:55:87:86:61:
b0:33:79:d6:f7:d3:0b:3f:a3:54:cf:8a:b0:59:bd:
57:55:c0:f1:d2:6b:c4:e3:ec:71:43:aa:d9:04:c8:
d0:22:79:fc:67:65:ef:08:30:bb:27:f0:bc:33:7d:
cd:4d:55:90:04:62:f0:bd:4c:8a:14:dc:d0:36:da:
4b:55:2c:b1:e5:fa:7d:28:95:fa:b5:ff:97:51:00:
c1:67:f0:b1:fd:2b:a9:bd:f6:82:8d:9e:d8:d0:25:
d7:89:d9:88:cb:d2:c3:b2:70:bf:35:b6:c1:0d:a9:
2d:fa:fc:e0:b3:ff:88:2d:ab:1d:b6:c5:85:fa:2f:
ee:aa:1b:cc:c1:3c:74:40:fb:d4:17:b1:5a:ce:a4:
dd:2b:3c:e7:ba:44:1c:80:b6:64:02:d2:3a:ae:1f:
78:86:07:af:52:c2:a1:70:96:00:74:97:0d:22:38:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:B0:AF:E2:8D:93:0D:75:BE:DB:C3:BB:49:96:4B:23:25:99:51
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:25:87:ad:be:ba:d9:1e:c8:53:e9:40:bf:39:95:47:d9:73:
73:d2:e8:5f:c5:21:b4:bd:87:ba:0e:d6:05:76:42:e4:0f:03:
2d:ab:43:71:18:ff:47:a6:16:f0:cb:75:cf:2f:29:2f:1e:41:
e5:63:0b:bc:e5:2d:dc:88:43:8d:f0:5a:05:71:ba:9b:60:64:
2a:e9:bb:d1:0f:5d:fd:8c:e4:67:94:3b:f9:b8:0e:dc:5b:fd:
39:b9:6e:12:78:a0:45:46:11:dd:c9:0b:ea:10:d2:7a:ab:35:
cb:5b:24:6c:9d:7f:d0:c6:fd:89:98:88:39:f8:a5:cf:0d:9d:
eb:8b:e8:6a:92:04:86:11:64:52:ac:65:54:cf:0e:db:74:e8:
df:e6:c2:3a:18:ab:c9:55:8d:88:35:0b:8c:79:60:08:2e:e9:
a4:30:45:2d:27:ab:5c:aa:c1:08:a6:99:71:7b:25:a0:56:29:
74:28:64:13:ef:0c:95:bf:9e:5a:44:cb:08:f3:5c:79:42:77:
a3:07:71:c7:e4:77:0e:c2:fb:cb:90:f8:c4:03:eb:8e:4d:e0:
69:72:05:74:16:d9:53:5c:ea:da:7a:a5:85:ae:b7:f5:9f:b9:
a4:89:ca:d9:1e:0c:f0:08:9e:90:8a:fd:52:58:0a:a0:dc:4d:
53:e0:65:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70nm5eNFd18lZ8DPeFiYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTBjZGI5YmFlMGI5MzJjNzlhMjlmOGQ5NzkyZDMwOWY3
YWQ3YjcwHhcNMjUwODA1MjAwMDQ3WhcNMjUwODA2MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg1YzJlYjBhZmUyOGQ5MzBkNzViZWRiYzNiYjQ5OTY0YjIzMjU5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWY+C/p+oNApOInNblHLe3EgM+OL
nK5VD2HTBVH4PNeuxHK1sA1W1k6oNLPIJxOyH67Cy68/K0bhlPhpVV1qL1MZRyD7
GRS1v6AnH/LO9wVDnhnGDFWHhmGwM3nW99MLP6NUz4qwWb1XVcDx0mvE4+xxQ6rZ
BMjQInn8Z2XvCDC7J/C8M33NTVWQBGLwvUyKFNzQNtpLVSyx5fp9KJX6tf+XUQDB
Z/Cx/SupvfaCjZ7Y0CXXidmIy9LDsnC/NbbBDakt+vzgs/+ILasdtsWF+i/uqhvM
wTx0QPvUF7FazqTdKzznukQcgLZkAtI6rh94hgevUsKhcJYAdJcNIjgwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwusK/ijZMNdb7bw7tJlksjJZlRMB8GA1UdIwQY
MBaAFFUQzbm64Lkyx5op+Nl5LTCfete3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQt
ZGY1OTAyMDEzY2RmLzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQtZGY1OTAyMDEzY2Rm
LzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyWHrb66
2R7IU+lAvzmVR9lzc9LoX8UhtL2Hug7WBXZC5A8DLatDcRj/R6YW8Mt1zy8pLx5B
5WMLvOUt3IhDjfBaBXG6m2BkKum70Q9d/YzkZ5Q7+bgO3Fv9ObluEnigRUYR3ckL
6hDSeqs1y1skbJ1/0Mb9iZiIOfilzw2d64voapIEhhFkUqxlVM8O23To3+bCOhir
yVWNiDULjHlgCC7ppDBFLSerXKrBCKaZcXsloFYpdChkE+8Mlb+eWkTLCPNceUJ3
owdxx+R3DsL7y5D4xAPrjk3gaXIFdBbZU1zq2nqlha639Z+5pInK2R4M8AiekIr9
UlgKoNxNU+BlUA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:01 2025 by rpki-client