Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: Bu3q/GdDFtEsEkdS4/80w1sCe6/T7qrlVfYch254O4g=
Subject key identifier: DD:1B:36:E4:B0:FA:F9:B2:92:1C:96:3E:3F:DB:22:CD:F0:F7:01:56
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019845F611DB283C1218409D20B5AF9AB8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 09A2
Signing time: Sat 26 Jul 2025 09:00:11 +0000
Manifest this update: Sat 26 Jul 2025 09:00:11 +0000
Manifest next update: Sun 27 Jul 2025 09:00:11 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: 1jp9MBIP1NoryvyuU/hHpwJ10AWvZmnywKhI2LCJPQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:11:db:28:3c:12:18:40:9d:20:b5:af:9a:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Jul 26 09:00:11 2025 GMT
Not After : Jul 27 09:00:11 2025 GMT
Subject: CN=dd1b36e4b0faf9b2921c963e3fdb22cdf0f70156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:54:8c:74:fe:e4:36:11:c4:71:02:b7:ff:
f2:25:93:bf:8c:1b:f1:98:f0:3b:ff:2f:03:81:ef:
f1:61:30:15:98:de:69:63:7d:57:85:85:53:2e:aa:
d1:f6:5a:b0:7d:ae:9d:51:26:6d:38:61:4f:b7:51:
52:e3:e8:cc:ea:0c:6f:3a:0e:85:6f:28:1b:9d:91:
95:6d:10:5a:54:28:76:0d:65:ec:2f:5d:a5:53:b7:
fd:48:2a:48:18:50:e2:cd:27:8e:0d:78:6f:2e:84:
5d:6d:68:4a:ac:8b:d5:f6:0f:31:db:f7:21:44:7f:
1d:81:88:b7:14:8e:3d:d5:d2:bd:06:aa:62:d4:22:
9f:74:18:b7:d1:69:f3:a8:a6:d6:1d:d8:a3:79:13:
45:3a:c2:b3:b4:47:4d:c3:e7:b3:7d:dd:1a:86:45:
62:67:ca:91:0f:68:f8:d3:2f:ee:1d:dd:c5:bc:25:
70:8d:02:b9:a5:8e:a7:a9:6f:9b:d5:8b:c7:42:f4:
4f:81:9b:48:3a:61:f7:18:9c:a4:60:40:0c:00:97:
70:63:f4:1c:0a:6c:3b:72:4c:ff:8c:86:ab:a2:fb:
02:f1:50:c5:96:0a:48:17:a3:cf:2a:1a:85:65:af:
f7:ba:cb:c5:e3:fd:87:a3:83:c5:60:89:98:ce:a0:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:36:E4:B0:FA:F9:B2:92:1C:96:3E:3F:DB:22:CD:F0:F7:01:56
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:69:33:c2:1c:cf:da:94:1f:e3:de:6b:ac:7e:56:f6:43:07:
fe:a9:27:bd:68:e2:a0:da:e2:66:aa:f5:0a:e5:89:e3:19:08:
7a:26:c8:c4:82:72:6d:80:08:dc:b3:5a:e4:b0:b0:bf:a1:58:
0c:c2:b3:46:76:35:18:c4:ea:54:3f:12:06:e4:78:0b:01:a2:
43:7b:b8:7e:70:f8:34:a9:9c:b1:29:1a:74:40:4a:1f:9f:60:
93:87:6e:b5:c9:91:d1:26:ff:4c:ee:38:5d:57:eb:a1:3a:84:
5e:2f:d0:49:f8:21:41:bb:e0:17:19:97:4f:2a:4c:a0:f5:b2:
8a:18:76:dc:8f:c2:f0:08:6d:0d:8b:c0:95:61:15:d0:e2:c5:
ed:7f:23:4f:d6:0f:c6:7b:87:94:4e:7a:5a:5d:15:e2:3b:7f:
84:8a:6f:b8:b8:3a:28:db:e2:66:b1:76:03:bb:4b:e5:9c:30:
fd:65:33:fc:80:7e:86:53:3b:07:b0:39:ae:a9:f8:66:35:10:
11:8d:1b:89:b0:87:b8:e5:72:fc:88:0a:1f:88:24:fe:72:5a:
a4:4b:0b:37:3d:20:d8:34:99:7a:f5:e6:7e:5a:9f:57:b9:e1:
af:39:62:ba:f5:72:4c:0c:5d:1b:28:57:18:0f:69:f5:2f:16:
ec:06:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:14 2025 by rpki-client