Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: JnxjDJHjy1T4l9vPdZef2mCc+HGUZLvr4uELrI2zJO8=
Subject key identifier: C9:29:4D:C2:30:B9:C4:57:83:18:88:DF:07:F6:C6:FB:5F:07:C2:08
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 0198530EB28763B231F6DBD20E5A9DBF026C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 10ED
Signing time: Mon 28 Jul 2025 22:02:08 +0000
Manifest this update: Mon 28 Jul 2025 22:02:08 +0000
Manifest next update: Tue 29 Jul 2025 22:02:08 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: JcKpAV7YB1sc6cxdXzvnKNYKB3d6glEgvRiH5gvt6OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b2:87:63:b2:31:f6:db:d2:0e:5a:9d:bf:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Jul 28 22:02:08 2025 GMT
Not After : Jul 29 22:02:08 2025 GMT
Subject: CN=c9294dc230b9c457831888df07f6c6fb5f07c208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:e1:ff:38:c5:6f:ee:a8:38:6b:05:1d:3d:
3f:96:15:0d:5a:53:43:75:70:06:aa:4b:59:4c:d5:
2d:63:6b:a2:d5:d0:06:16:6a:b0:6f:53:3f:ae:46:
37:a2:f3:43:84:1f:77:b8:42:3b:a3:a2:ce:c6:11:
14:e9:b9:e5:e7:a6:03:c6:f6:47:08:82:5f:56:98:
c0:24:3f:bf:a2:81:3a:89:5e:ce:fa:d9:50:cc:ed:
e6:09:ee:59:b5:cc:c1:2e:f4:4b:31:81:53:e0:1c:
75:56:5e:ac:82:1c:41:bd:bf:85:23:fa:92:93:b5:
89:3a:97:00:f4:cf:3e:c5:97:cb:83:a4:1a:91:15:
54:1a:4e:3a:c8:6a:e0:b6:56:66:2c:b5:01:60:21:
6e:f2:19:13:cc:f7:1e:00:f9:10:39:b0:07:14:e8:
fe:b8:22:97:38:fa:6a:d1:3a:33:37:ab:a7:1c:78:
dc:94:ba:76:d8:18:d3:46:3f:8a:fb:32:1b:07:41:
a3:67:11:d4:75:5c:79:b8:f7:6e:b9:df:db:c1:97:
1b:02:8e:d6:bf:cf:66:5a:1a:14:5e:7e:54:32:1c:
ff:79:54:5c:1c:8b:5f:75:20:5a:72:56:15:93:07:
7f:01:ec:78:bd:54:79:25:96:d0:82:62:68:fc:9a:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:4D:C2:30:B9:C4:57:83:18:88:DF:07:F6:C6:FB:5F:07:C2:08
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8b:b9:ae:6c:7f:9d:a7:47:90:e9:49:a0:bb:3e:aa:20:c6:
fc:79:ad:44:7d:12:87:b9:53:db:0c:0e:23:d1:97:7e:c2:f8:
8a:4c:ef:3b:5e:f5:1c:60:36:18:b2:4c:da:69:73:5d:37:68:
df:1a:b0:4a:4d:3e:91:d4:f1:74:28:ec:1b:16:47:b3:fd:5a:
64:20:e8:61:45:eb:1f:1f:a0:b7:4c:00:56:f8:d1:97:5f:07:
73:99:8c:f9:a1:03:26:0f:a5:1f:89:c3:44:f6:fa:1d:d5:61:
b1:68:de:a8:b9:f3:86:22:db:f0:0a:94:bb:4d:f8:2e:22:94:
94:3a:cd:c9:b5:a2:4f:1a:91:46:68:c2:5b:3b:06:f4:b0:cf:
ac:74:1b:d9:2c:de:08:89:8c:96:d6:6b:e3:81:da:06:54:16:
2f:9f:6b:83:0c:ff:2a:2c:9e:6f:c2:c4:ed:e0:1d:23:07:d2:
54:cd:2b:34:ca:e9:27:f1:f8:aa:f1:6d:41:f3:b4:0b:e6:9a:
90:cd:80:f7:31:ef:89:00:36:c8:e3:8f:e3:d8:34:b3:3e:fd:
a4:58:92:29:b0:0f:f5:56:a6:bb:79:1c:1d:90:8c:3f:bd:08:
69:a8:32:d2:30:30:27:22:64:5c:bf:7b:7a:21:0d:d6:22:d1:
61:39:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:53 2025 by rpki-client