Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier: /Fw+9Kqu+JBBN8CyEQl73h8lQRlxspmNqakzrx03z3E=
Subject key identifier: 57:5C:A2:27:D7:E3:A2:3D:71:AC:67:F0:CB:33:31:EB:C8:0B:FD:45
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial: 0198861F84F7C9C09FB0885F6357BFCCB77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 20:01:09 +0000
Manifest this update: Thu 07 Aug 2025 20:01:09 +0000
Manifest next update: Fri 08 Aug 2025 20:01:09 +0000
Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: cn06jbzwoW5IImQBUOBIx02cC4O3Y0qa9Fzdcmh1NG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:84:f7:c9:c0:9f:b0:88:5f:63:57:bf:cc:b7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Validity
Not Before: Aug 7 20:01:09 2025 GMT
Not After : Aug 8 20:01:09 2025 GMT
Subject: CN=575ca227d7e3a23d71ac67f0cb3331ebc80bfd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:af:4d:01:d8:dd:16:d7:75:27:db:c8:bf:
cf:b2:20:ed:a3:8a:08:ea:96:a8:88:10:f0:12:48:
bc:ce:be:a8:47:e5:4d:47:a3:38:29:46:a1:c5:35:
53:c7:5b:b1:1c:b3:d4:35:cf:4f:2f:50:ab:fa:c3:
a4:ea:b3:31:1a:c2:a7:e2:09:59:ea:98:86:67:7e:
da:32:25:bf:64:74:6b:e9:09:25:f4:4b:8c:55:ae:
a7:bf:4e:bb:7d:ba:76:a8:df:ce:08:bb:d6:cb:46:
ec:0d:36:e9:15:1d:7f:0c:09:58:d6:47:44:49:18:
a3:45:1c:ee:5e:6d:36:cc:64:29:50:53:40:03:ea:
e7:a8:e6:a5:98:9b:fa:e7:cc:4f:fc:80:18:11:cf:
9a:c2:d5:0a:91:fc:98:0c:93:1f:01:04:d8:8d:8e:
e2:50:fd:ba:a9:2e:2e:de:83:6a:77:2d:02:88:ae:
e8:df:47:ff:19:9e:ad:de:63:4d:f3:c2:e0:ca:64:
48:21:b4:95:b6:c7:1a:8e:c3:f4:60:26:93:59:38:
da:1a:ea:29:01:31:35:ba:c1:cc:81:73:a5:0f:83:
a2:2d:23:e2:8f:9b:4d:3f:19:08:ba:c3:20:1d:b2:
a3:ed:fb:78:3f:92:8c:17:6a:e2:08:2c:0c:a3:84:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:A2:27:D7:E3:A2:3D:71:AC:67:F0:CB:33:31:EB:C8:0B:FD:45
X509v3 Authority Key Identifier:
keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e4:6a:a5:92:b7:99:c4:b3:74:a9:cc:ce:c8:2a:fa:ce:4f:
ab:d3:3c:1d:1b:52:06:fa:fa:6c:9b:ff:1e:31:27:3a:53:80:
e3:3c:43:92:5b:97:48:2c:d5:ae:a4:73:c2:87:de:6d:0c:b6:
c6:c1:06:3f:a3:ea:96:5f:42:d7:1a:ed:bb:23:2f:b5:fa:c1:
e7:3e:f0:d9:9f:cb:60:2e:bc:cd:7f:bc:db:2b:64:61:a3:88:
9b:7f:db:7a:33:f4:7a:d3:99:e8:4b:d7:b7:62:41:d5:80:c8:
b1:c4:fb:9a:38:87:36:fa:9c:50:73:cb:11:2f:9b:56:f3:53:
98:0b:49:8b:65:fc:d0:b5:53:62:4a:8f:91:ca:55:df:8b:4e:
91:98:41:2e:de:e4:95:33:92:ca:da:a1:bf:40:f4:63:bc:42:
cd:50:31:80:9a:3e:e5:e2:cd:2f:fb:d9:c0:e9:f0:50:b9:6b:
07:78:0a:dc:9f:3d:53:93:94:23:6b:96:0c:67:a9:8c:4f:c4:
51:cc:1f:a7:8f:0c:a9:42:d9:16:fb:40:c8:44:81:96:7f:02:
47:39:e2:ad:a3:b2:c0:8f:fb:90:10:94:cb:db:cc:c5:b8:8a:
27:41:76:84:99:3a:e3:6d:1e:f9:5c:55:7d:79:c1:61:a5:b2:
f0:21:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:04:36 2025 by rpki-client