Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: 3hmm27oqjddceo7hDel3WeaIwvxtCID1avWHZ8b95WM=
Subject key identifier: FC:00:D2:1D:70:99:9B:84:87:67:07:6A:E7:7E:F2:5A:7F:07:50:8B
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 01988BEA6CEE3536A8A2C9305CF8A26F506E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0705
Signing time: Fri 08 Aug 2025 23:00:52 +0000
Manifest this update: Fri 08 Aug 2025 23:00:52 +0000
Manifest next update: Sat 09 Aug 2025 23:00:52 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: WZegMV9WCBAF3LAi1KlE0+P5pmo1/SJqGmLVMrUT+AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:6c:ee:35:36:a8:a2:c9:30:5c:f8:a2:6f:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Aug 8 23:00:52 2025 GMT
Not After : Aug 9 23:00:52 2025 GMT
Subject: CN=fc00d21d70999b848767076ae77ef25a7f07508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:ab:e0:d7:b7:1d:3e:b3:37:f7:24:70:94:
5a:93:86:7e:1e:01:d4:19:fb:a6:fe:b4:2b:ef:15:
d6:c8:bf:92:80:94:8d:2f:4d:63:e5:1e:8e:3a:03:
e8:87:29:a5:21:83:e0:c9:7e:99:d0:ed:51:a8:ed:
00:f8:7c:c1:2c:75:53:da:da:6d:08:06:0c:18:ce:
f1:ea:20:35:d4:c0:90:17:45:9c:62:7e:4e:14:f0:
e5:ef:b2:d5:ba:67:c0:bf:e0:94:13:78:94:1b:a1:
d8:10:c8:fa:12:d3:4b:37:3e:2d:4e:b3:f3:9a:84:
46:04:84:a9:3a:17:f2:c8:e6:87:a4:76:37:d8:cd:
c2:4c:70:6d:6f:ee:4d:62:47:f2:06:26:6a:cc:ca:
17:d1:ab:87:96:0e:ce:92:cd:49:85:81:d1:ce:39:
43:0e:24:77:af:a0:44:64:9e:4d:0a:36:59:96:9d:
c6:be:53:ff:a4:7e:b4:90:3f:59:9d:87:da:f9:aa:
f6:d2:a3:d2:7d:32:ed:f9:17:22:fd:57:9f:e1:97:
18:1a:43:61:67:cd:a8:7f:24:ee:82:68:86:3c:ca:
a9:3c:96:0b:1f:62:95:f2:d9:4d:1e:af:cd:f7:2a:
a0:2c:1d:06:ea:78:75:4d:11:42:93:cd:df:93:a6:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:D2:1D:70:99:9B:84:87:67:07:6A:E7:7E:F2:5A:7F:07:50:8B
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:f6:e1:00:ac:3c:bd:c7:e1:5d:7f:2b:4c:0c:8b:7d:6b:
d8:59:48:90:46:3f:36:46:f2:08:44:67:2a:ba:90:95:02:6a:
77:26:eb:06:af:95:34:71:10:64:1e:d2:7c:f8:45:0b:bc:12:
e1:b7:0d:0a:0b:d8:50:a4:d3:1e:9c:45:07:79:b1:ea:04:42:
87:76:e7:dd:8c:5c:e9:58:83:26:7d:72:a4:b5:33:66:ca:ed:
e0:01:82:7a:26:36:92:80:09:55:f8:11:61:f4:b3:f3:94:9b:
2d:ef:b1:50:5a:d8:fc:17:b6:3d:14:68:56:d8:49:92:bc:4f:
ee:e2:75:55:85:c5:15:cc:95:c2:96:ed:f3:b4:12:fd:6c:c6:
fb:0e:23:28:43:7f:83:a4:69:41:39:09:28:e0:20:94:10:a8:
e1:7c:0e:dd:51:25:62:76:b0:ac:66:80:1a:7e:43:e7:7a:db:
1a:f2:25:4f:0f:20:11:cf:0c:41:23:df:dc:aa:7e:44:d6:7e:
5e:41:01:8c:73:98:6f:62:74:58:21:f0:f5:e2:3d:e7:d3:03:
8f:ed:d4:9d:f1:03:06:52:16:cb:1e:43:ef:bc:30:9c:fc:10:
5e:a9:b4:a9:eb:da:19:2f:20:7d:8e:d2:51:00:0c:84:5f:a6:
e0:c9:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:05 2025 by rpki-client