Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
File: Vu9y3nfRt-K0RwW2y85jlCHam-8.mft (raw, json)
Hash identifier: 7GF9n0tNls9sLPaISHchkyRl11sWUbYZ5y31t/7DgYo=
Subject key identifier: 5B:C2:34:BF:0B:4B:FF:EF:56:E2:C0:10:EE:A9:D5:33:21:05:18:BF
Authority key identifier: 56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
Certificate issuer: /CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Certificate serial: 019849D333AC41BD862A8C4CCDB866E06000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
Manifest number: 0443
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: Vu9y3nfRt-K0RwW2y85jlCHam-8.crl (hash: ElOIQrQg1qnF7uEXTRkYPg7ore3SeDgKRPjPD5B5uFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:33:ac:41:bd:86:2a:8c:4c:cd:b8:66:e0:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=5bc234bf0b4bffef56e2c010eea9d533210518bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:f9:44:b1:0d:a4:9d:2a:37:db:f1:e1:72:
07:3b:f7:75:52:53:cc:64:e1:27:11:df:af:95:21:
7e:3a:a5:d7:d6:5e:44:f6:8a:38:d9:0a:54:9d:50:
5b:b6:11:b7:fb:c2:3a:ea:70:be:3b:8c:3e:4c:5d:
89:09:0b:ff:66:de:9f:98:8c:e0:5c:4a:6e:3f:ae:
45:e1:93:7a:1c:99:da:80:24:b1:a3:72:fa:15:29:
25:20:bf:24:ca:a1:15:04:38:f6:18:a7:14:70:9b:
88:7a:f3:c2:5b:45:63:07:74:bc:41:a6:0f:d5:ec:
58:e6:85:8a:26:fb:b0:e6:26:b0:ea:14:a9:51:a7:
4c:02:9e:21:8f:8b:dd:46:53:2b:ec:50:2f:d7:c1:
d9:33:13:24:88:07:28:49:03:60:e4:72:8d:b4:4e:
b5:dd:59:12:cf:c8:46:59:4b:37:ec:a6:d0:6e:7b:
0e:1e:bc:b6:f9:c3:8b:41:0d:35:da:17:49:af:93:
77:65:c5:fa:d2:c0:31:2f:f0:eb:da:3a:79:70:c4:
3e:ff:f8:94:bb:84:51:e4:9a:29:3f:f3:15:77:f5:
a1:1d:f6:a7:11:92:6f:28:f4:89:a7:6e:e6:62:0f:
aa:2d:76:f6:2b:32:86:1f:9a:16:f1:7a:f1:9d:68:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:34:BF:0B:4B:FF:EF:56:E2:C0:10:EE:A9:D5:33:21:05:18:BF
X509v3 Authority Key Identifier:
keyid:56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:c0:a5:62:9b:0e:8c:9d:59:ae:b4:74:31:77:c5:d8:1b:
01:9d:92:93:9d:1f:2b:ad:c3:75:06:e3:1c:19:8c:4f:0e:27:
81:4e:4e:00:3d:b9:3a:49:f7:14:da:ec:1d:d5:aa:f2:e3:bd:
6f:5f:97:b0:e2:03:2c:bc:bc:4f:8a:2c:70:fa:da:85:ca:84:
8e:da:9e:03:94:6d:04:8b:09:37:e0:1d:59:05:cc:c1:5d:90:
80:ad:34:67:4a:7a:e9:4e:aa:19:99:37:ec:c5:a0:b4:ba:7e:
ab:8d:aa:16:63:31:04:9b:29:6c:d8:4d:a4:a8:9f:34:c6:2e:
c3:ad:58:ca:a9:d6:59:33:a0:64:46:5d:bc:a2:fd:1e:82:10:
fe:64:29:08:68:be:80:49:fb:bd:33:9c:82:0a:ca:aa:db:f4:
cb:02:5e:ed:e7:72:b1:f9:22:96:f2:64:5e:1c:12:12:cf:1b:
19:cd:93:49:60:0f:0d:7c:6d:31:f3:f7:c7:da:94:11:50:98:
62:da:ba:e4:34:28:71:50:91:40:71:02:45:be:2b:d9:33:ce:
31:95:df:b5:d1:c4:fc:d9:cc:98:14:42:d0:03:6e:32:d3:54:
a1:d9:ed:30:88:bc:57:9e:ba:35:89:f4:ac:ad:f1:d2:86:95:
f6:85:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:49:17 2025 by rpki-client