Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: u/kVPmWxFueY5zn1DCASQrCl2H2JaMFLa5uf3kyd8PA=
Subject key identifier: 8F:9D:C3:F3:60:15:7A:0B:A5:C7:EB:2C:DA:97:15:3F:81:8B:5B:54
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 01984A4123B2A1C3DBF5AE5F7190361B84A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 05BF
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: y8CrQ69FDsFaEt4CHC8qgNE92GN9BYaMEmekoj6eo1E=)
2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:23:b2:a1:c3:db:f5:ae:5f:71:90:36:1b:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=8f9dc3f360157a0ba5c7eb2cda97153f818b5b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:56:34:4c:ac:a7:52:4a:f0:e6:b6:39:06:
91:b1:3e:b6:69:40:b3:8d:7b:24:50:83:87:95:c4:
c9:fd:17:7d:4b:cf:c8:4a:ca:02:46:3b:92:68:74:
d5:8a:89:cb:69:08:3a:17:26:fb:85:e0:67:33:90:
f1:85:97:a2:2c:1a:80:6e:96:8f:22:ac:f4:1e:10:
05:7a:73:23:4b:4c:49:82:18:87:23:cb:cc:e9:47:
4f:27:12:21:bf:36:78:de:8a:2f:4f:94:6e:d6:d6:
c7:9e:07:76:3a:76:f9:ba:0a:ae:2a:3e:33:aa:38:
08:53:72:5d:ad:26:9f:51:0a:ec:31:62:d5:6d:ae:
71:85:00:1e:9b:62:36:15:ee:73:c7:b5:46:e5:73:
df:26:27:00:44:dc:f0:0d:10:ec:5e:8c:81:7b:ab:
ca:cf:17:73:8e:51:6b:0d:8a:cb:e6:5a:57:d1:a0:
2a:21:97:6c:a8:c2:72:53:45:2b:4c:1c:83:24:d8:
7d:3d:4d:4d:7f:e8:5b:76:a3:19:79:ec:49:82:9d:
fb:67:1f:10:d6:7f:d4:74:3a:9b:b1:ae:dd:63:7a:
26:e4:de:d6:a6:62:e2:2a:79:1e:df:62:a6:9c:23:
37:45:b9:33:3a:ae:2d:73:29:12:0c:0e:0b:f8:ab:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:C3:F3:60:15:7A:0B:A5:C7:EB:2C:DA:97:15:3F:81:8B:5B:54
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:55:db:1c:51:f5:fe:23:bb:b5:13:de:a0:18:85:d4:a7:
00:70:2c:f9:d6:af:80:2e:86:0e:16:a9:46:9a:c3:bb:c5:cb:
ff:9a:29:89:de:46:05:7a:3a:9c:ea:d6:2f:93:2c:e3:9b:ab:
b8:1b:bb:e2:c2:35:93:e9:95:1d:25:46:52:55:e0:00:51:8f:
fa:ef:8b:cc:49:33:f1:a0:d9:a3:f2:b5:77:54:1b:2b:07:8c:
ca:12:f8:ef:f7:c5:bf:a6:ac:4d:13:e2:97:c7:47:63:ce:18:
0a:36:0b:95:31:7c:1c:0b:a0:58:a8:d1:45:a5:6b:65:51:8c:
00:2b:d5:d3:8e:47:79:6e:61:d3:8e:74:9e:ad:82:f3:b7:c7:
38:49:ac:c5:19:15:20:cc:b2:4b:06:aa:24:ae:c1:00:83:81:
8a:bf:97:3f:9a:4c:b1:d7:4b:91:79:24:ff:d4:0b:09:8d:6e:
cc:6f:52:99:1d:35:27:97:b9:86:f9:a0:ab:7c:b5:9d:77:f1:
f6:db:ef:67:ec:17:d9:a7:41:cb:64:01:68:79:50:a9:76:1b:
a5:16:b3:6c:c1:0e:37:09:6c:6e:c1:43:6d:20:c2:82:01:0f:
2e:60:67:10:a0:33:65:0e:3f:5a:49:99:f2:ea:70:38:78:3d:
e4:ef:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:05:14 2025 by rpki-client