Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier: TKEQcfBkwSBbVvbsgE9sBM+ozZFkktrQgqIFubxCLzs=
Subject key identifier: AE:AA:71:02:65:74:8E:31:9B:DC:C1:C8:92:B2:9F:9D:19:3E:73:13
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial: 019888442A35CD480AD9AAFC7CC3B3A22E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number: 102B
Signing time: Fri 08 Aug 2025 06:00:25 +0000
Manifest this update: Fri 08 Aug 2025 06:00:25 +0000
Manifest next update: Sat 09 Aug 2025 06:00:25 +0000
Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: E6qviagXkZo9xW3G1r3QB+2FWGovedDFTGidwVZ/MhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:2a:35:cd:48:0a:d9:aa:fc:7c:c3:b3:a2:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Validity
Not Before: Aug 8 06:00:25 2025 GMT
Not After : Aug 9 06:00:25 2025 GMT
Subject: CN=aeaa710265748e319bdcc1c892b29f9d193e7313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:6f:f4:ac:2e:1b:d3:7f:d6:a3:60:99:ea:
1f:be:1a:e5:23:38:2e:11:3b:13:54:1f:45:83:1c:
ae:1a:31:d8:61:83:d3:8e:3a:5b:61:60:40:7e:5f:
3e:28:70:39:b9:00:1e:cb:a0:32:47:d0:14:cf:1c:
e6:40:77:9f:49:b1:50:64:07:1b:09:88:22:bf:a4:
bd:a6:57:a9:8a:e8:32:c2:b2:63:4e:6f:15:8a:73:
6c:81:7f:20:f0:a6:61:85:c0:bc:a3:bf:34:ae:f8:
80:6e:e0:6e:4e:bc:e9:ca:79:d0:da:d8:a6:24:a2:
82:1c:c2:bf:be:78:b2:fb:2a:ad:04:c9:b3:83:25:
43:59:75:e2:9e:8a:87:3c:30:e0:7c:17:a9:38:ce:
b1:60:ba:ca:6e:d8:9e:bc:89:cd:13:bc:9b:cd:e8:
27:44:f8:08:f5:77:b3:ad:39:6e:71:2b:8b:6b:15:
d2:77:88:ad:cd:c0:d8:ae:b0:a7:55:02:7e:35:be:
64:67:6c:48:b6:93:af:f5:48:f6:2e:71:89:28:4e:
ea:64:29:6f:05:12:74:4e:81:99:7e:d8:6b:5e:58:
c7:d9:f5:79:de:1c:66:f4:9b:c3:48:67:db:71:a2:
8d:3d:d4:5f:4c:be:b6:81:c6:bf:da:57:4d:a4:db:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:71:02:65:74:8E:31:9B:DC:C1:C8:92:B2:9F:9D:19:3E:73:13
X509v3 Authority Key Identifier:
keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:a1:0c:15:b6:77:84:35:36:21:37:00:f6:f8:2e:d4:d4:
83:fc:70:7a:07:78:38:43:4d:e2:3a:b3:9f:21:59:29:d9:8e:
c7:6c:a6:10:40:d6:33:b1:38:65:32:92:18:5c:2d:f3:a8:fc:
a9:ec:3a:a2:0a:d6:5c:ac:6a:22:62:9b:07:30:5e:3d:be:e9:
a0:63:8c:4e:ff:e8:a3:2c:1e:2b:ef:cf:31:1e:fa:2c:89:6a:
42:9a:3a:46:4b:0c:18:3f:b8:aa:f0:58:04:95:03:61:50:9d:
ad:df:6d:11:af:fe:47:ff:5a:19:c5:32:ab:3c:0e:bb:e1:a9:
82:a4:0e:2e:a7:b0:83:3e:76:9a:25:bc:cb:42:ab:24:fa:ea:
f8:e0:4b:f1:11:e8:d1:eb:bb:b4:91:02:50:47:db:59:c7:88:
e4:82:c0:4a:71:79:71:40:16:45:27:58:78:b9:38:c4:bb:b6:
7c:87:05:4d:10:2b:be:2e:64:53:72:56:16:e7:53:4c:cd:18:
2f:85:5e:16:f0:1d:37:d2:1c:72:e8:4e:05:ac:fa:29:fb:12:
c8:cb:eb:b5:ab:25:88:2d:85:2b:72:1d:89:29:04:06:80:1d:
c3:03:09:b7:81:c7:5e:3a:19:c4:ad:26:72:cd:42:26:04:17:
c3:fc:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:00 2025 by rpki-client