Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: CifY9yD/KdY+jafdE3gVrmpAPoFaOqF+k4EQlTz3Zbs=
Subject key identifier: C3:3F:99:54:15:91:DA:01:0F:7F:74:54:83:63:DD:93:26:AC:3F:39
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 01976BBD7F077C50E628C4F86E5898AEDAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 1209
Signing time: Sat 14 Jun 2025 00:01:10 +0000
Manifest this update: Sat 14 Jun 2025 00:01:10 +0000
Manifest next update: Sun 15 Jun 2025 00:01:10 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: Sen475tn5gzqwS+6HpMi734V0wFE+gfAbF94LuKnFws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:7f:07:7c:50:e6:28:c4:f8:6e:58:98:ae:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Jun 14 00:01:10 2025 GMT
Not After : Jun 15 00:01:10 2025 GMT
Subject: CN=c33f99541591da010f7f74548363dd9326ac3f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:6c:a3:a0:eb:b4:40:69:12:55:8c:32:56:
91:da:89:9e:cf:de:0c:4f:66:e0:74:51:85:91:ff:
c1:76:45:47:9f:63:0c:16:45:2c:fc:40:36:31:96:
53:6f:61:3c:43:07:b9:15:51:dc:3f:f9:44:41:d8:
ba:1d:cf:54:d1:2c:08:30:2c:5d:cf:62:42:cf:e1:
b7:dd:06:0e:f3:4c:6f:55:fd:75:22:ef:cf:cb:db:
75:89:4e:91:12:56:be:09:37:dc:4d:99:a3:50:b2:
4e:da:9d:16:64:98:f5:06:88:73:d7:8a:ed:5a:06:
f5:1b:da:d1:ff:d4:de:f7:61:f7:98:0c:cc:cd:70:
53:8c:9e:1e:40:18:2b:b0:85:63:a5:f9:05:cb:ab:
56:78:7f:dc:d9:48:be:07:cf:88:19:70:7c:fd:8f:
8a:3c:41:57:8a:ce:08:8e:c5:b8:1d:14:01:d8:e0:
7b:f0:b4:9a:9c:08:aa:d7:3b:f8:86:09:bd:d5:bb:
a5:4a:9e:6a:b9:13:cb:f9:65:ac:d5:e6:1f:99:99:
a2:0b:2f:70:5d:25:57:ef:b7:0f:06:66:c1:fc:8c:
33:76:f9:15:99:dc:a6:57:08:d5:12:dc:43:1a:16:
65:3f:ab:96:2b:82:d6:83:16:2c:f1:84:c7:ac:88:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:99:54:15:91:DA:01:0F:7F:74:54:83:63:DD:93:26:AC:3F:39
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:6b:4a:30:74:ef:ec:73:3d:3c:2a:49:09:a5:c2:2d:c2:
36:fc:0a:f9:5c:a6:d4:dc:f7:cb:85:60:23:39:18:52:a7:c6:
8a:7d:1a:83:be:b2:24:aa:3e:80:d7:eb:66:c7:07:30:f5:99:
9d:35:64:26:a8:54:df:40:39:26:5c:e1:eb:4b:2b:1b:5f:75:
f4:82:cc:43:c8:20:6c:3f:dc:37:c5:6d:bc:be:66:0e:13:9a:
64:0a:a7:dc:7a:d1:b6:28:09:f3:07:ca:b2:26:3e:6f:9a:1f:
51:fb:47:50:e4:6c:bc:94:2f:76:2f:88:db:7f:5d:ca:51:55:
aa:7c:57:1c:79:b4:e8:66:c1:28:c0:a8:15:66:6a:53:05:3a:
1a:d4:f7:de:77:1e:12:64:ba:10:4d:54:05:8c:f8:4e:c0:6a:
28:a7:ca:e6:c0:18:0c:ac:ad:d0:cc:75:01:f4:10:78:bd:a3:
ed:bc:b0:89:3c:c0:14:f4:98:25:75:ca:fe:e4:a1:4c:42:e4:
8a:8a:6f:d8:1f:a9:bc:20:5a:8f:79:92:28:57:28:8b:70:ce:
42:e6:cf:c4:41:88:4e:42:b7:e9:bf:01:0f:e0:e2:f5:50:00:
85:e3:b4:35:84:11:6a:8c:92:74:92:ff:cd:e4:c9:b4:46:61:
bc:80:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:58 2025 by rpki-client