Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
File: VmhcNSHqj-av5l1TOjsZno92UFs.mft (raw, json)
Hash identifier: BOzi2EkNk2glB7pAOyQfgc7QAIfsBffXQ+azNiFYvaw=
Subject key identifier: 0C:89:2D:51:13:C0:AD:1A:B6:77:06:9F:8F:93:DA:25:27:21:E3:48
Authority key identifier: 56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
Certificate issuer: /CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Certificate serial: 01984B5532B732CDF8090FCF47548A9B6A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
Manifest number: 1507
Signing time: Sun 27 Jul 2025 10:02:11 +0000
Manifest this update: Sun 27 Jul 2025 10:02:11 +0000
Manifest next update: Mon 28 Jul 2025 10:02:11 +0000
Files and hashes: 1: VmhcNSHqj-av5l1TOjsZno92UFs.crl (hash: Sn4/Ybu2EH4HBsJAx2S4FJEi95fdcx4rmrwj8VQHtZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:32:b7:32:cd:f8:09:0f:cf:47:54:8a:9b:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Validity
Not Before: Jul 27 10:02:11 2025 GMT
Not After : Jul 28 10:02:11 2025 GMT
Subject: CN=0c892d5113c0ad1ab677069f8f93da252721e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:74:bd:f3:fa:77:6e:05:06:2f:2e:92:b2:
71:c1:a4:11:21:bb:3b:b0:cb:79:c9:7b:c2:5d:24:
cd:d7:2e:64:13:5b:5d:b3:f8:3d:04:74:71:74:f7:
25:5c:cb:2c:0b:00:28:2b:3f:36:71:0f:c5:47:e4:
da:5b:9e:d6:54:55:ee:4a:17:a2:c6:cc:72:15:be:
42:41:99:b2:27:b0:7b:ba:bd:49:eb:d4:d6:f8:f1:
12:46:80:b0:7f:6a:af:0f:ab:df:85:12:8e:f0:9b:
de:0e:c9:4d:24:e9:31:56:bb:8e:5c:75:0e:04:10:
b3:37:50:1b:18:8a:bd:52:12:45:bb:eb:71:54:4e:
3d:08:52:df:67:2b:51:21:b0:2e:6d:d5:3d:58:0e:
d6:91:f6:15:1f:56:1c:d2:84:69:c4:0e:78:49:51:
12:53:ff:39:6e:33:5e:a4:ed:02:87:fb:5b:48:9d:
2a:e4:11:19:5e:d0:c2:b1:14:0c:ae:f8:5f:9f:13:
91:8d:e9:bc:8f:a9:f9:9c:81:42:90:03:0f:45:bf:
92:ca:18:37:9b:18:39:36:87:18:6c:99:5f:52:d8:
8f:73:b8:d3:8d:bf:74:c3:d5:a3:0d:94:fb:c8:9a:
ff:55:eb:54:47:6c:43:25:bd:8b:cd:97:4a:d6:23:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:89:2D:51:13:C0:AD:1A:B6:77:06:9F:8F:93:DA:25:27:21:E3:48
X509v3 Authority Key Identifier:
keyid:56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:65:0a:86:af:c0:de:95:67:af:95:58:f2:14:8b:6c:c8:
5b:5f:fc:6c:c0:57:d6:7e:15:c8:ee:e1:30:7c:b7:6e:ff:30:
a4:4a:09:9f:56:64:b9:7a:55:de:ed:3d:d4:a3:5f:6d:3f:af:
7d:2e:dd:dc:27:f3:29:3c:de:6c:f3:c6:36:eb:ef:c2:45:ff:
00:a7:66:6b:bb:02:f5:a0:88:ec:cf:72:29:62:6f:ea:83:56:
c2:4c:10:f5:78:2b:ac:b4:ee:0f:5b:17:0c:a2:5d:44:bf:fe:
e5:04:47:6a:4b:4f:24:bf:d7:98:ca:48:52:6e:d3:06:a4:c5:
28:c7:64:a0:b2:a9:ff:f6:21:d8:47:25:d8:d8:d0:aa:2a:0e:
6a:e8:f9:32:bd:76:97:cd:a9:a6:70:89:66:e3:62:f5:d0:75:
12:25:47:a0:a0:10:39:0a:3c:fb:2e:58:6a:d3:7a:fd:78:97:
40:bf:48:57:54:c0:c7:5d:17:81:89:aa:60:3e:85:f0:7c:7e:
7f:a1:7c:08:95:b6:88:82:84:31:e7:5c:30:90:07:5e:d5:1f:
87:43:b0:7d:70:20:57:3c:cd:db:b2:75:fc:cc:1c:2e:c5:37:
a4:71:ab:0c:3c:95:3e:09:85:a1:6a:72:5e:aa:24:eb:a3:28:
8a:7c:fe:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVTK3Ms34CQ/PR1SKm2ojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Njg1YzM1MjFlYThmZTZhZmU2NWQ1MzNhM2IxOTllOGY3
NjUwNWIwHhcNMjUwNzI3MTAwMjExWhcNMjUwNzI4MTAwMjExWjAzMTEwLwYDVQQD
EygwYzg5MmQ1MTEzYzBhZDFhYjY3NzA2OWY4ZjkzZGEyNTI3MjFlMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9F0vfP6d24FBi8ukrJxwaQRIbs7
sMt5yXvCXSTN1y5kE1tds/g9BHRxdPclXMssCwAoKz82cQ/FR+TaW57WVFXuShei
xsxyFb5CQZmyJ7B7ur1J69TW+PESRoCwf2qvD6vfhRKO8JveDslNJOkxVruOXHUO
BBCzN1AbGIq9UhJFu+txVE49CFLfZytRIbAubdU9WA7WkfYVH1Yc0oRpxA54SVES
U/85bjNepO0Ch/tbSJ0q5BEZXtDCsRQMrvhfnxORjem8j6n5nIFCkAMPRb+Syhg3
mxg5NocYbJlfUtiPc7jTjb90w9WjDZT7yJr/VetUR2xDJb2LzZdK1iPGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyJLVETwK0atncGn4+T2iUnIeNIMB8GA1UdIwQY
MBaAFFZoXDUh6o/mr+ZdUzo7GZ6PdlBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmZjZDItNWRlMy00MjE2LWE3NWMt
NThjMzI4OTVkY2RlLzEvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNmZjZDItNWRlMy00MjE2LWE3NWMtNThjMzI4OTVkY2Rl
LzEvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwplCoav
wN6VZ6+VWPIUi2zIW1/8bMBX1n4VyO7hMHy3bv8wpEoJn1ZkuXpV3u091KNfbT+v
fS7d3CfzKTzebPPGNuvvwkX/AKdma7sC9aCI7M9yKWJv6oNWwkwQ9XgrrLTuD1sX
DKJdRL/+5QRHaktPJL/XmMpIUm7TBqTFKMdkoLKp//Yh2Ecl2NjQqioOauj5Mr12
l82ppnCJZuNi9dB1EiVHoKAQOQo8+y5YatN6/XiXQL9IV1TAx10XgYmqYD6F8Hx+
f6F8CJW2iIKEMedcMJAHXtUfh0OwfXAgVzzN27J1/MwcLsU3pHGrDDyVPgmFoWpy
Xqok66Moinz+9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:00:46 2025 by rpki-client