Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: Vw7eZ2kKTjiI2hkhL0dACFAfImaIVfBVhDNVTBfJhyg=
Subject key identifier: E3:0E:80:C4:18:A8:1C:BF:BE:C3:30:B0:4D:12:91:2A:04:82:DF:40
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 01984776D1E07A3A40AB2E66F1624B7432E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0932
Signing time: Sat 26 Jul 2025 16:00:25 +0000
Manifest this update: Sat 26 Jul 2025 16:00:25 +0000
Manifest next update: Sun 27 Jul 2025 16:00:25 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: DL/IJq1ODDFno8igZapRrEpzWXsAqE+Fpy5YaqDlnTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d1:e0:7a:3a:40:ab:2e:66:f1:62:4b:74:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Jul 26 16:00:25 2025 GMT
Not After : Jul 27 16:00:25 2025 GMT
Subject: CN=e30e80c418a81cbfbec330b04d12912a0482df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:ff:f0:b5:ac:58:ab:a9:f5:65:c6:08:98:
9f:68:7a:ff:3b:ff:d6:e8:9e:ec:4b:ec:58:e5:c7:
27:0c:5c:da:80:ef:d5:fd:c2:ed:42:88:99:63:c0:
00:78:d0:16:3a:5d:f6:e7:b7:ea:35:52:2a:2a:d9:
bd:57:56:ef:39:ca:a6:83:4f:e7:a2:5d:73:8d:4a:
d4:77:45:d7:40:42:20:3a:f2:84:8d:75:4b:19:90:
6b:9f:d8:ce:cb:ca:21:16:ce:bc:80:9e:b4:70:d7:
b2:a7:eb:a7:be:df:b9:f3:5b:06:2c:c9:4e:8f:e8:
10:22:48:4f:37:97:3b:65:55:dc:49:a8:c8:1d:5b:
38:d6:85:c0:e6:17:aa:e3:92:2a:90:c8:c1:16:99:
8e:8b:bc:c0:52:5e:0b:40:3a:ad:bb:d7:78:51:f5:
83:be:77:5e:86:5b:a0:29:6e:3b:89:a5:8b:3a:63:
2f:8a:31:e8:81:03:91:f4:47:84:32:79:9d:9c:7a:
e4:05:53:c5:ba:9c:72:ea:e7:68:a9:18:5e:7e:10:
79:8e:06:1a:90:aa:25:da:d3:c4:fe:1e:47:8e:70:
a5:bc:9d:a4:ef:b3:f8:dc:0f:8d:4d:c8:d9:04:6c:
85:e4:fc:bf:52:3c:95:81:b7:a0:b2:58:a3:57:b5:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:80:C4:18:A8:1C:BF:BE:C3:30:B0:4D:12:91:2A:04:82:DF:40
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:1d:34:f3:57:e3:54:e8:5d:dd:ae:e2:39:49:36:45:cb:
46:e7:a7:ac:93:9e:d8:d6:92:1c:25:5a:27:ef:71:e1:c3:bc:
bf:12:35:3a:e8:79:7e:90:02:28:93:44:ef:c9:85:8d:9a:d2:
bb:74:a7:a8:d5:f2:06:f4:97:e3:7e:c4:ad:fe:2e:e2:2f:32:
de:d3:1f:b7:7e:5e:6f:89:86:99:aa:ab:9a:24:cc:4b:bc:a4:
9a:ab:67:1f:a6:d0:b5:aa:ec:87:b9:96:6b:d6:82:af:48:92:
ad:9f:81:21:f2:f5:09:1a:cd:8c:34:87:f2:53:21:1d:fe:9f:
42:89:15:b8:b8:12:a7:5a:4d:c6:b6:43:73:92:60:55:4b:3e:
96:51:58:92:30:2d:aa:23:8d:1e:07:bc:54:a9:fe:71:53:fe:
9c:d5:e4:98:f2:72:9a:52:8e:ce:de:f7:4e:69:6f:a3:70:cf:
72:0c:9a:6b:cc:7d:7b:c4:1a:07:23:05:b1:64:6c:a2:fd:a9:
6b:73:96:00:77:ff:06:81:98:58:2c:e8:a4:ff:39:9a:fc:d0:
26:95:95:63:94:61:b8:ed:af:b1:d6:c7:3b:71:62:1d:4b:af:
0d:f9:7f:9e:0e:4c:f5:8c:97:3c:7a:75:44:37:50:98:b0:5d:
67:c8:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:10 2025 by rpki-client