Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: bAQYwf8lpp1GAdfFn5TGZaGij7y5CrFwh7sWzyuAyAI=
Subject key identifier: B2:BD:7D:D3:D5:F1:CC:F0:DE:21:B8:78:1F:4C:8C:83:79:39:F1:00
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 01988EEBF935D3FBD93A2C91DA8E13E50E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 06F1
Signing time: Sat 09 Aug 2025 13:01:26 +0000
Manifest this update: Sat 09 Aug 2025 13:01:26 +0000
Manifest next update: Sun 10 Aug 2025 13:01:26 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: JU/qRAbW89v237YGWI/EGgAZSL4qAgpSUFJfIj8S+wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:f9:35:d3:fb:d9:3a:2c:91:da:8e:13:e5:0e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: Aug 9 13:01:26 2025 GMT
Not After : Aug 10 13:01:26 2025 GMT
Subject: CN=b2bd7dd3d5f1ccf0de21b8781f4c8c837939f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:86:6e:93:6f:8b:19:a6:4e:1d:23:2e:73:
88:ca:61:e9:99:c6:e5:63:3b:d5:f0:c7:5b:63:89:
b3:46:db:4a:d6:77:6d:81:91:8c:4c:3a:26:d1:4a:
ea:19:06:56:04:60:76:ad:d4:2c:c6:fe:7f:f1:81:
1f:dd:22:42:a5:7f:47:bf:0e:d1:ff:79:02:9e:0a:
b0:2e:82:c0:44:18:60:b9:16:24:e6:17:90:6f:39:
ed:98:35:a3:ff:21:50:38:94:80:b9:ba:d5:be:af:
6d:87:7b:cc:c7:4b:4d:c3:17:a6:17:fe:e5:2c:e8:
7e:18:9a:bf:55:cb:28:c6:66:ca:a6:9f:22:f8:04:
21:93:b5:03:85:64:9e:41:99:be:5f:8e:7e:b3:0f:
6d:83:85:4b:71:cd:9e:73:1c:f4:19:85:f5:c7:2c:
26:e6:b7:e0:53:f5:48:56:8c:b0:2a:8d:8b:51:ec:
74:b2:83:21:11:55:5c:5c:4b:0b:f6:7a:7b:a6:38:
75:bf:12:93:30:a4:fd:d4:e6:8b:4b:03:3c:41:7e:
20:63:60:0f:46:2d:cb:13:d5:0f:3a:46:83:32:41:
70:fb:a1:8b:47:9a:12:7b:0e:ab:64:33:b5:5d:04:
77:14:d3:80:f8:e3:72:b7:37:d9:49:3d:0b:d2:55:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:7D:D3:D5:F1:CC:F0:DE:21:B8:78:1F:4C:8C:83:79:39:F1:00
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:19:fd:e1:c5:df:60:ba:fd:f8:b8:80:e5:be:ea:10:fd:
47:e9:1f:34:cf:5c:02:ef:69:07:2c:5d:55:e0:9f:af:c4:57:
82:e9:d2:d0:65:be:71:6e:40:49:14:01:d3:5b:f6:68:04:d8:
7d:fb:70:05:e3:9d:81:41:4a:31:52:1b:c0:d3:3a:aa:02:aa:
e9:1f:b4:63:c6:a7:f6:31:7a:7e:c5:9d:ea:e9:30:51:3b:5a:
97:cc:9f:63:8a:0f:ef:d3:ff:12:f2:0e:2d:da:df:05:40:1c:
de:f9:a0:43:13:f4:9a:9a:0d:cf:36:07:2c:3b:e1:ba:b1:51:
be:34:fb:d8:2a:49:45:88:be:17:40:d2:1c:3e:21:35:88:63:
37:6d:a7:68:b1:b3:78:f6:33:fc:75:5e:a4:2b:23:7d:c7:49:
af:f3:e4:bf:2d:df:d2:ee:eb:ff:90:fa:93:47:c1:54:44:d9:
68:8c:d5:98:5d:77:1b:17:f1:44:89:b5:0c:1b:65:1f:5e:b2:
78:30:41:3a:ce:cf:3f:4f:67:e3:60:3d:b1:bf:83:ba:5a:90:
bc:cd:a4:b9:c1:3d:76:b4:ae:5b:b5:db:fc:dc:b5:30:0c:f6:
9f:3b:5b:e1:57:96:68:55:05:26:8a:fb:9b:e9:63:a2:55:5c:
1d:42:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:35 2025 by rpki-client