Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: bYNBTZlu5Zyz8r0hLE74h5148c9/JED1p9uN+s9SoUs=
Subject key identifier: 1B:92:AB:76:84:EB:C4:1D:9E:28:C5:AD:F5:33:E5:D6:A1:28:F9:35
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019892C91E54CEE016FE781343B7B95ED820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 07:01:50 +0000
Manifest this update: Sun 10 Aug 2025 07:01:50 +0000
Manifest next update: Mon 11 Aug 2025 07:01:50 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: tJLC680sK3UhQG4XAlwE64iAIak1sANtjYEfkrpOTBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:1e:54:ce:e0:16:fe:78:13:43:b7:b9:5e:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Aug 10 07:01:50 2025 GMT
Not After : Aug 11 07:01:50 2025 GMT
Subject: CN=1b92ab7684ebc41d9e28c5adf533e5d6a128f935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:fb:73:2f:49:37:da:c0:fe:0e:13:30:5b:
c9:80:2b:e6:05:61:ea:1b:47:43:6f:43:95:ab:3b:
74:ec:a4:c3:ed:b4:02:4f:18:29:0f:84:94:c2:6a:
eb:11:03:84:21:b8:a0:d1:83:e7:d3:1a:d2:e5:ff:
9c:e1:9a:b3:56:93:19:0a:6e:c6:3a:fd:72:e5:36:
b2:e0:96:ce:50:6e:5f:7b:22:bc:de:bf:49:d1:1f:
fd:cc:de:f3:56:95:b1:2f:e7:85:f9:98:23:89:60:
5e:3c:1c:1c:85:aa:ee:45:f3:5a:87:72:c0:1d:36:
fa:ab:44:73:96:64:93:f0:95:e1:b2:35:b8:1d:d3:
33:34:43:96:b6:58:64:d5:05:e3:4b:d1:b3:9e:bd:
ca:47:2a:ad:d2:69:26:37:d3:3c:b0:ef:4b:a6:70:
16:f3:7b:54:ea:1f:6e:d6:f1:e5:e4:9e:b1:fc:97:
87:86:03:59:2a:8c:3d:c8:28:95:21:c1:89:3f:b5:
6d:1e:78:b5:e0:ba:fc:07:79:56:34:4b:62:9f:00:
b7:8c:06:8a:14:dc:4e:b5:73:51:5d:45:e5:24:da:
13:0d:bb:c3:89:f1:0e:54:3a:d0:46:ad:ec:55:a4:
6a:b6:cd:b3:dc:8d:9d:62:5f:03:2d:57:3a:75:13:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:AB:76:84:EB:C4:1D:9E:28:C5:AD:F5:33:E5:D6:A1:28:F9:35
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:36:62:ec:89:4c:b5:9c:13:e1:16:91:5a:e9:01:04:c1:41:
6a:a0:22:ea:29:f1:f3:34:f5:ca:37:9a:ee:95:3f:f1:a6:e9:
6c:34:4d:e7:c6:71:73:a6:fa:12:61:10:bc:2f:51:b1:76:ea:
85:32:9b:e5:4d:10:58:f1:57:5f:be:5e:a2:b2:dc:21:c4:fb:
56:72:90:c7:ba:49:ae:8e:ca:fa:77:40:9f:e3:61:8c:42:95:
0b:03:57:f5:41:81:18:e2:39:05:33:60:ce:2e:71:c3:a9:2c:
67:6c:97:17:25:f8:f9:67:de:2e:aa:3f:72:62:90:e1:da:70:
15:38:be:f9:4a:f9:ec:ea:28:17:cd:79:d5:ad:f5:4e:62:fa:
09:ee:85:f9:f3:68:d4:3b:72:bc:f6:44:82:c7:50:86:14:31:
b9:d9:ca:28:7d:de:44:c4:d3:19:2e:88:a5:e7:b7:e7:9f:ad:
cf:e9:03:85:97:35:8a:21:06:94:bc:70:ed:a3:d8:b0:83:cf:
f9:83:ca:b8:1d:f9:2d:fb:82:df:19:ba:0b:d0:8e:78:7b:b7:
69:5d:69:cb:09:c2:c5:74:6a:62:70:b9:5f:a1:77:ad:c8:b4:
5a:2e:42:7e:66:55:3d:17:f6:e6:2c:b3:cb:cd:7b:32:4c:43:
2b:01:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:22 2025 by rpki-client