Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: i/LLamj+fiH+FTm7VkxTnOP9kwIDV3izLufSzkITKaI=
Subject key identifier: 5C:21:7F:67:9E:D7:28:AA:18:FE:4F:36:AB:F9:D7:56:BA:36:16:3A
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 01988CFDFCAE70CA0C9BFE63A4882EE975BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 13B5
Signing time: Sat 09 Aug 2025 04:01:52 +0000
Manifest this update: Sat 09 Aug 2025 04:01:52 +0000
Manifest next update: Sun 10 Aug 2025 04:01:52 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: 73Vy3HsxtX28HpdgchZTpKr8P5IBVbJ1Lm4rcbM7RUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:fc:ae:70:ca:0c:9b:fe:63:a4:88:2e:e9:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: Aug 9 04:01:52 2025 GMT
Not After : Aug 10 04:01:52 2025 GMT
Subject: CN=5c217f679ed728aa18fe4f36abf9d756ba36163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:bb:f3:92:a6:d1:4d:3c:d1:b5:9d:bb:20:
50:4b:70:e9:d3:7e:11:f2:d6:4a:80:ce:3b:bf:d7:
ba:34:49:16:4a:33:77:51:a3:d1:20:df:70:7b:a1:
0c:0c:ab:d7:9c:91:42:cb:17:28:d8:cf:c0:2f:30:
c8:45:de:fe:d5:e7:a6:e4:c1:72:64:b5:a9:56:78:
78:63:72:97:84:52:99:4e:de:36:08:f7:b7:4b:7d:
70:a2:0c:17:44:c7:83:6c:2c:90:02:2d:88:ed:e7:
2c:ce:2d:46:3d:50:83:2e:f1:18:04:7b:09:aa:14:
dc:f8:28:ef:9f:b7:0c:30:37:a2:3a:97:44:2f:a3:
c6:9c:34:c2:34:27:83:63:ca:57:f2:d6:e8:7a:d8:
05:e8:8b:1c:e6:6a:b4:31:56:83:ce:e7:42:41:c1:
5c:f3:e9:76:80:cb:7f:89:22:73:b4:2e:59:30:35:
db:0e:ec:df:3c:f2:64:42:62:32:a2:75:1a:2d:2f:
df:75:6d:b8:9f:c2:f7:9a:f4:39:80:d3:88:26:45:
8b:a6:a1:a3:2c:5a:5d:1e:59:88:a6:35:fc:6d:25:
29:33:66:93:61:0f:84:19:83:2e:c2:c2:36:26:a6:
75:92:33:52:fe:91:2d:17:6e:1c:99:30:98:1c:f8:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:7F:67:9E:D7:28:AA:18:FE:4F:36:AB:F9:D7:56:BA:36:16:3A
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:8e:be:48:98:b4:90:a9:bc:29:24:e6:17:fb:6a:69:a6:
3d:69:4b:a5:70:c3:45:f4:0a:61:ff:e6:ae:d4:2f:7a:31:55:
d8:c9:46:86:88:dc:4a:9a:8f:30:4d:41:8c:0f:a6:c2:a5:f8:
b5:ce:1f:97:1b:6c:8d:c8:80:4b:d1:55:aa:79:a8:e2:73:66:
f2:fb:52:04:36:29:77:c5:58:1b:3a:4b:66:c3:d3:30:5c:d4:
c6:c1:65:b1:e4:4f:ba:cd:04:1f:ca:d6:33:2e:a7:ea:6c:c5:
42:e0:b0:53:c8:07:20:61:2c:cf:6f:92:1e:13:4d:8c:4e:c5:
9d:bb:ea:e4:64:76:32:1a:17:a2:de:71:c0:46:96:06:6e:d7:
58:bf:bd:95:e0:a5:5a:26:c1:b7:8c:46:c5:bc:de:91:e5:f6:
01:e1:9c:90:c0:1a:b2:e7:ad:ce:28:44:fd:78:95:a8:93:57:
21:53:a4:d6:8a:d2:2c:cc:c8:81:00:ae:52:7b:4a:2a:d1:71:
28:a7:c3:97:0b:c4:0c:9c:a8:8e:d8:4e:04:51:6e:3a:81:1e:
0f:cb:83:53:08:1b:b1:42:0a:cb:4c:fa:d1:77:19:2f:98:f0:
87:7a:8d:01:cf:4b:a3:df:14:30:3b:c8:8d:fc:8f:56:2f:9e:
8c:64:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:44 2025 by rpki-client