Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: tKgJD0XIvTQi1Wn04UgXTKCd82obxYV8fCHgnQi0q80=
Subject key identifier: F2:1E:C1:7A:D6:91:3D:DD:2C:1C:8D:1B:27:3A:26:C9:69:C7:A8:C5
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 01987298FD3F7DBE67EFF824237E0771699F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 0A11
Signing time: Mon 04 Aug 2025 01:01:25 +0000
Manifest this update: Mon 04 Aug 2025 01:01:25 +0000
Manifest next update: Tue 05 Aug 2025 01:01:25 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: dLiLeua341s2RWlp7tZ2ayd65mFb0y2aTnmM4AKTmzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:fd:3f:7d:be:67:ef:f8:24:23:7e:07:71:69:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Aug 4 01:01:25 2025 GMT
Not After : Aug 5 01:01:25 2025 GMT
Subject: CN=f21ec17ad6913ddd2c1c8d1b273a26c969c7a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:99:0d:9e:dd:9e:12:2c:ed:74:8c:19:ea:
a2:6c:8e:5e:44:1c:8a:72:ad:e8:b8:fb:18:0f:7c:
15:b3:cb:40:38:6c:94:a3:f6:8a:d6:cf:29:d5:18:
39:af:f1:50:0f:9c:0a:50:f2:c6:62:a7:61:9c:e3:
92:66:cf:bf:91:13:1a:14:75:72:2d:ed:a5:f9:76:
ba:ff:5d:e9:da:5c:bc:9b:11:0a:c9:14:9c:d7:8f:
ca:67:d7:8b:d7:73:87:d7:e4:20:73:9c:be:8a:93:
3e:e6:df:61:30:2f:da:f6:8d:81:84:49:79:6f:83:
ae:42:a0:d2:ab:a3:ea:ad:33:b1:a9:cf:0f:4c:85:
5d:10:2b:98:d5:79:45:23:c5:a4:1e:de:7b:fb:f7:
72:68:af:d4:c2:f3:f4:3e:c6:f3:40:d5:65:36:ec:
bb:f8:1b:12:58:11:fe:8f:4d:26:17:ba:80:79:83:
9a:63:1e:a0:90:6c:f9:33:fa:df:6f:7e:16:a9:91:
55:9a:c8:cd:6c:5f:09:2d:fd:53:c7:c4:9a:67:bd:
96:df:89:a4:4c:93:46:22:d3:69:99:b3:3b:c1:2f:
ae:15:86:f6:89:31:4b:6a:08:0f:96:7d:88:ca:2d:
b2:9c:2e:5b:82:5b:eb:ed:b6:df:ba:7f:0f:60:90:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:C1:7A:D6:91:3D:DD:2C:1C:8D:1B:27:3A:26:C9:69:C7:A8:C5
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f2:4e:91:f7:66:25:b1:db:3e:eb:b5:8b:75:c8:17:62:40:
93:30:79:65:12:57:a2:84:43:6c:4c:90:17:d8:e3:c8:e1:39:
d0:4e:0e:2c:c7:8a:fd:22:c0:5c:24:ef:2a:2d:d7:e1:18:b8:
63:8a:4f:db:80:21:c3:a4:73:6c:0f:2d:37:95:d3:b7:42:1c:
db:ec:d0:5b:87:de:b4:de:86:a4:d0:3f:90:16:f0:0a:3b:5b:
19:c8:39:26:51:6b:d2:00:fc:5f:29:23:a3:23:13:6c:12:e2:
8d:08:ed:e5:35:0f:ec:1b:79:aa:09:8a:e0:e8:2a:d6:49:e0:
42:8f:46:33:6e:0d:f6:c8:f3:3b:4a:a1:2c:ce:7c:c1:72:ca:
f8:39:f3:66:1f:df:ba:18:c4:09:fb:72:8e:79:42:fe:99:f3:
3f:10:78:82:9d:d5:18:9b:41:63:b3:97:c8:39:7a:54:18:f4:
6c:85:fa:e9:50:5c:13:88:10:c8:ba:66:1a:a7:8e:14:f8:df:
78:7d:65:2d:de:12:c2:3e:ba:5d:c1:75:7c:f9:4f:f7:f3:71:
9b:90:2f:40:c0:4e:84:e5:3e:1c:2a:00:5c:f6:54:6f:c8:9d:
c6:fc:5f:73:5c:8f:0e:04:c2:7d:d5:93:2e:56:db:51:a5:b3:
12:3d:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:32 2025 by rpki-client