Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: KfJGxOel+zz11cJgspD+usc6dyobyBJiuhXQVRLwgK8=
Subject key identifier: 4A:DB:88:25:B7:34:AA:D0:7F:CC:B7:92:D5:07:26:C4:59:AE:A4:B3
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 0198511F012DD2226775E58A452409A8595F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0200
Signing time: Mon 28 Jul 2025 13:00:43 +0000
Manifest this update: Mon 28 Jul 2025 13:00:43 +0000
Manifest next update: Tue 29 Jul 2025 13:00:43 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: CJwePBwSAqcnveDGcUnRxRqp/eDHwNQjJLpe4+EPCus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:01:2d:d2:22:67:75:e5:8a:45:24:09:a8:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Jul 28 13:00:43 2025 GMT
Not After : Jul 29 13:00:43 2025 GMT
Subject: CN=4adb8825b734aad07fccb792d50726c459aea4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:36:69:b6:b5:eb:d5:ae:27:f7:fe:c7:e7:
17:51:97:44:36:8f:03:5a:5a:0a:d5:1b:13:a3:23:
af:ab:bc:45:ba:ad:de:ad:b2:ae:81:a0:59:a8:54:
70:66:f4:ba:1e:22:de:f3:5d:6a:aa:cc:f3:9a:79:
86:03:9c:4b:c9:27:0e:df:6e:d3:c9:2a:b1:8b:5d:
b4:7f:cc:35:17:7e:d2:72:b1:98:be:69:82:97:a4:
fc:89:27:2f:59:5e:9b:63:ab:12:1c:72:0a:c7:39:
c1:6a:d0:15:2f:d0:49:58:26:21:d1:e7:96:f5:b3:
d4:05:47:76:26:b2:7b:80:15:57:12:18:67:f5:84:
60:b0:77:76:b1:e7:a7:12:e6:22:5b:77:55:0a:d9:
55:6f:e5:d9:3e:ca:32:9e:94:e1:e5:d9:f6:ce:d8:
1c:be:6a:f6:3b:87:23:73:b9:16:a8:c1:bd:0a:8e:
b5:be:4f:f3:38:60:5b:9a:fe:ed:84:e4:57:a7:be:
5f:35:4a:39:87:bf:2d:98:04:a3:dd:8a:0a:7b:cf:
64:04:56:08:f3:88:1e:87:9d:4d:f2:0f:0d:ad:d0:
34:c0:53:7a:e0:89:dc:8a:6e:e3:63:2b:9e:9a:45:
07:ad:d2:b3:bb:db:d3:e7:c8:5b:d0:6d:c3:e7:d6:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:88:25:B7:34:AA:D0:7F:CC:B7:92:D5:07:26:C4:59:AE:A4:B3
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:f2:a9:54:a8:77:2f:29:22:1a:fd:ee:ac:47:fe:30:81:
79:11:ce:6d:c6:87:94:f3:40:56:fc:e6:39:8f:27:49:ef:84:
0c:59:22:b0:6c:ce:37:79:6e:9d:93:5b:f7:ff:0c:04:56:9b:
c1:21:19:e5:2b:10:20:68:60:ba:8d:7b:20:e6:52:c5:fd:14:
c0:b9:8b:d3:64:1d:5e:39:d9:3a:6c:10:42:67:6c:3f:23:b6:
21:db:58:5f:7a:df:29:80:cc:c2:e1:9d:a9:dd:13:21:fb:90:
6a:c7:97:d9:93:70:99:8f:ae:0b:c1:22:62:1b:4a:ec:7e:4c:
fb:0e:51:92:14:06:67:04:fa:0e:14:ad:5e:14:03:0f:04:2f:
52:26:8a:c0:e3:ff:ff:5e:c8:8b:76:be:ef:a9:4b:0e:12:91:
86:2b:84:06:54:3d:19:9f:5c:39:27:67:c8:34:39:4a:5c:6a:
19:1d:f0:f1:f8:f2:26:5e:52:77:bd:b2:af:59:bf:05:a6:52:
0e:f1:ce:bf:4d:a9:af:d4:56:77:f3:9c:2a:d1:63:19:0a:de:
59:c4:05:1b:02:db:03:3f:b6:e8:1c:81:d0:80:cd:55:96:b1:
fb:64:78:23:a3:1f:95:cc:c0:ae:f9:7c:ab:d2:62:0b:cb:14:
1f:e3:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:21:36 2025 by rpki-client