Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: plmhXMH1K9nuQ4iiUPruH0oKcMGpFuKhOf1Oh8Wj3tw=
Subject key identifier: AA:C6:96:56:82:02:5A:24:00:AE:C8:7F:48:BD:A4:BE:81:EA:9F:11
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019896002E32F0FAD4BCCCF53661510855D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0C7D
Signing time: Sun 10 Aug 2025 22:00:50 +0000
Manifest this update: Sun 10 Aug 2025 22:00:50 +0000
Manifest next update: Mon 11 Aug 2025 22:00:50 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: OvcD3po5Xo7sabKDU5kqiIweqZJDf3xloUueBsJPUn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:2e:32:f0:fa:d4:bc:cc:f5:36:61:51:08:55:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Aug 10 22:00:50 2025 GMT
Not After : Aug 11 22:00:50 2025 GMT
Subject: CN=aac6965682025a2400aec87f48bda4be81ea9f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:86:c1:db:f7:8d:86:7b:87:c6:d2:fa:1b:
3f:b6:b3:86:01:9b:5f:14:be:82:e0:37:23:d5:37:
18:df:6d:46:29:38:bb:cf:ac:d2:43:0e:ca:1d:d5:
c1:fc:ad:b6:6a:f2:4c:3c:c3:3d:b3:cf:e4:c2:22:
d7:23:a9:99:62:ce:61:53:2d:3c:6c:48:1a:26:71:
22:e5:62:8a:65:93:e6:7d:bc:ff:9b:a5:ec:fd:b6:
30:6f:f1:2e:36:36:19:5a:a5:58:e2:55:41:7a:9d:
b1:39:d7:59:1e:19:95:22:13:26:0f:98:27:98:db:
1d:6b:da:90:6e:48:dd:ca:b8:48:ad:0e:43:cb:46:
82:6b:94:4a:87:0a:27:90:b5:a4:6e:1d:13:57:c8:
ef:36:8a:af:de:ce:25:84:fe:21:26:43:b3:7e:7e:
c4:ab:78:b3:95:e5:ba:41:ab:78:6f:d7:64:23:21:
7b:64:66:f3:2c:a8:0f:0a:e8:21:dc:00:2e:e2:be:
29:8f:60:f9:81:6d:58:e4:12:97:3f:b4:83:af:6c:
2b:5a:40:66:6d:2b:f8:19:82:95:2d:0c:9d:fa:18:
6a:2e:40:c6:94:9a:a2:7a:fd:5f:72:92:02:78:f6:
13:61:da:5b:6a:8d:9b:89:a9:07:77:65:33:0e:21:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:96:56:82:02:5A:24:00:AE:C8:7F:48:BD:A4:BE:81:EA:9F:11
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:1d:70:c2:0d:a7:4e:cd:68:5d:b2:45:70:f9:86:54:58:
56:a8:d9:cd:63:2b:b0:5c:0f:2e:37:be:25:4a:0f:5c:7d:eb:
ac:69:ba:62:01:e0:3d:3e:73:2a:4c:43:0f:a3:3a:a5:e2:17:
60:fd:8b:11:7e:15:39:87:65:10:12:49:01:2f:48:21:b1:55:
a4:26:98:4e:79:b8:0d:56:e6:18:f9:d4:7a:0d:e2:46:e9:38:
2a:77:67:9b:16:a9:53:0a:71:e9:5b:7c:da:aa:af:9d:2c:ca:
bc:76:17:2c:09:42:35:fb:14:40:16:b7:c9:0c:fe:c8:cd:de:
9b:20:60:e0:33:8b:b4:b4:95:7f:50:1d:dd:49:e1:a2:15:02:
45:57:81:46:1f:33:b9:eb:51:05:88:e1:0d:fc:f9:1a:62:60:
67:85:09:f2:d9:47:25:ff:19:cd:d0:30:c1:61:9e:2c:6c:ed:
2f:49:d7:48:b3:68:19:76:e8:69:42:ab:01:ba:44:17:9b:84:
2f:d7:8d:2a:87:ad:2e:ff:56:6a:82:1f:4a:d7:12:86:79:51:
a4:94:6e:67:4a:ac:25:5a:78:2c:c1:17:9d:e5:6d:f2:d8:58:
15:6b:75:1d:98:6f:df:b3:5c:6d:5d:40:7b:40:f0:69:b8:15:
14:53:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:52 2025 by rpki-client