Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: J9NAXPThNns/TGbqw3NUmJims4iQllry39oKaHsLtWw=
Subject key identifier: 62:36:AD:44:60:B9:E1:8C:60:ED:A4:A6:D9:F3:D1:8D:63:2E:A9:5C
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 01989ECCFC2905E4A69EE36C9ABB301169E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0AA3
Signing time: Tue 12 Aug 2025 15:01:30 +0000
Manifest this update: Tue 12 Aug 2025 15:01:30 +0000
Manifest next update: Wed 13 Aug 2025 15:01:30 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: OyPt2QKPOD6+DnQGP11mQEthbRs+as+ziGU2xaebfKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:fc:29:05:e4:a6:9e:e3:6c:9a:bb:30:11:69:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Aug 12 15:01:30 2025 GMT
Not After : Aug 13 15:01:30 2025 GMT
Subject: CN=6236ad4460b9e18c60eda4a6d9f3d18d632ea95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:be:d5:aa:32:69:9f:bd:6b:8f:79:1c:43:
91:89:fb:15:5a:16:27:3d:7d:0f:1e:c2:e5:56:d4:
79:d3:6e:07:58:d0:e2:04:f7:3c:3f:c2:d9:9b:ce:
8c:37:2b:59:63:6d:dd:e5:93:ae:24:67:ed:7a:f3:
e7:7c:d5:18:18:82:4b:70:e7:96:98:60:97:a0:41:
01:8f:53:aa:1d:c3:3b:a5:bb:25:3d:bc:99:46:32:
b9:39:66:95:ca:97:23:6b:03:0d:3d:1c:51:a3:93:
46:a9:af:e5:13:7f:de:af:db:94:67:82:a5:9f:c5:
3b:e8:13:88:86:d3:e5:89:cb:6f:bb:8d:60:59:08:
71:25:10:60:ef:ba:54:49:d3:fc:2d:b4:8d:f1:f4:
eb:c3:7b:68:6d:c1:c1:4a:c3:f5:23:20:10:a0:20:
db:18:44:a7:39:03:f0:85:4a:c4:fd:be:63:3b:c4:
d7:1e:02:82:8d:f4:84:1c:14:bd:b3:bd:c8:1f:ab:
fe:7f:f7:aa:77:b3:7a:25:df:33:90:fa:c3:03:ff:
6d:16:38:34:03:f0:9a:ed:d4:f4:4f:e5:06:e7:33:
b9:11:55:da:f1:57:d8:74:d0:91:06:fc:20:9a:6c:
29:4d:63:51:5d:0a:50:b0:59:63:93:b5:4e:14:bd:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:AD:44:60:B9:E1:8C:60:ED:A4:A6:D9:F3:D1:8D:63:2E:A9:5C
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:29:0c:04:e1:e1:29:b9:d1:67:00:a6:39:36:e8:43:eb:2e:
9b:12:78:28:04:94:f3:c9:90:e3:cd:02:8e:52:bb:52:cf:ba:
5e:04:62:73:60:97:3b:f6:47:13:5d:f6:ad:c3:34:7f:67:e2:
66:bd:27:b0:79:ff:e0:82:03:ba:55:43:45:69:55:b9:f7:76:
34:38:8e:1d:6b:6e:e2:6b:e8:eb:a5:64:05:ef:da:a8:d5:1e:
30:e4:bc:24:da:38:b3:8c:fb:a4:4a:c7:10:eb:16:be:2a:70:
81:ca:44:85:23:13:9b:10:4f:8e:ea:1a:73:3a:2e:57:41:49:
5d:8a:2d:6a:6f:33:ff:fc:de:4a:b8:e6:a6:dc:cc:e1:6e:60:
8c:bb:3f:51:24:2e:18:8a:80:c0:a1:c9:e0:26:7e:7e:6f:41:
1c:ad:a4:0a:2c:f7:ce:ad:f9:70:d5:3e:0b:9a:7f:4e:b1:de:
b5:62:89:b5:f7:44:29:3d:65:84:ba:37:8e:a7:c6:e2:5f:a8:
0c:af:96:3e:e1:d3:6e:17:79:59:27:57:7a:a4:14:6a:a9:62:
74:25:7a:a1:a3:12:29:06:8d:02:c1:4a:7a:1f:93:57:24:46:
16:55:b8:d1:67:8f:b7:af:46:a8:be:7f:af:23:cc:d3:96:74:
0f:b2:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:53:42 2025 by rpki-client