Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier: AWxQTbtBPKckhhkO/fSpDXQ9mMpzhPAs/usawZuxuxk=
Subject key identifier: 5F:94:EF:11:49:82:06:F9:18:27:E0:16:92:4C:BB:98:A1:4C:0F:6E
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial: 019844AC64282A1A4FD5C3EA3E379238C706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number: 1008
Signing time: Sat 26 Jul 2025 03:00:05 +0000
Manifest this update: Sat 26 Jul 2025 03:00:05 +0000
Manifest next update: Sun 27 Jul 2025 03:00:05 +0000
Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: gDAtVqpT8MlLiaRdNdV3qnB68WWz92fGiZ/EveV0nd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:64:28:2a:1a:4f:d5:c3:ea:3e:37:92:38:c7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Validity
Not Before: Jul 26 03:00:05 2025 GMT
Not After : Jul 27 03:00:05 2025 GMT
Subject: CN=5f94ef11498206f91827e016924cbb98a14c0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:2a:9d:30:c3:e1:4b:c4:04:88:97:84:30:
2e:26:33:9a:0b:a9:6d:e1:88:ff:39:73:50:5c:4b:
1b:50:00:d8:26:61:7d:c8:d7:dc:36:e4:61:47:67:
aa:c6:0f:b5:b8:da:bc:af:32:b9:59:62:2a:ad:24:
84:ee:5c:4a:6d:cd:76:1b:2c:62:57:66:c9:2c:d2:
7a:72:20:27:0c:b7:9b:a4:48:64:d6:89:e7:62:c0:
79:4c:63:97:e9:4b:92:38:e2:70:9b:20:39:05:31:
c1:73:d9:9e:a2:58:30:9a:48:20:81:c4:34:5b:30:
fc:bb:78:1f:01:dd:7c:7d:13:a8:83:7e:e2:93:0d:
b7:07:88:5e:9f:37:fe:ce:8a:8f:16:c6:9a:f3:75:
b2:ea:46:87:4e:67:dc:e2:38:b7:9e:58:df:9b:89:
5f:d2:a0:b0:55:77:00:f8:4f:72:f4:18:6c:e1:d6:
f6:1b:46:6e:49:01:d6:df:4c:35:85:35:c5:39:60:
46:ea:6f:c5:5a:56:9d:7c:46:a8:1c:d9:4d:a5:2d:
f1:f0:00:0b:54:9b:6b:5b:90:22:58:05:9a:3e:d5:
5d:88:56:37:2d:e2:e5:12:0b:32:1c:b2:d8:94:b4:
2e:72:6e:87:31:bd:12:01:48:c8:5d:8e:00:3e:dd:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:EF:11:49:82:06:F9:18:27:E0:16:92:4C:BB:98:A1:4C:0F:6E
X509v3 Authority Key Identifier:
keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:7b:0a:48:0c:ce:ad:85:d4:88:c5:27:66:aa:fe:55:47:
a5:76:b4:60:8b:2e:84:26:17:55:de:9f:90:67:fa:c7:14:c7:
cb:cf:7a:2a:26:5e:a8:df:e7:02:68:96:f5:02:d3:2a:bd:ac:
5c:c0:e1:22:76:09:20:e2:1d:18:67:68:d4:3a:40:db:db:01:
9c:c2:41:e8:9b:a5:02:97:de:b2:55:33:42:16:c0:16:bc:e1:
b5:a2:32:80:07:4c:e8:eb:b0:02:63:eb:4e:28:dc:5e:6d:36:
a5:b0:e1:f2:3d:91:0d:8c:05:8e:89:29:6f:87:3c:42:73:e7:
1f:16:68:87:e1:a6:79:a0:4e:cb:f2:eb:86:3d:0f:6f:ff:0a:
47:fb:cd:a8:40:14:02:97:b0:d4:c1:11:d0:cd:c7:6e:ca:fa:
a1:4a:54:48:c1:43:a5:38:0d:13:13:5b:3a:0c:58:ff:6e:db:
2b:c6:4a:83:64:f5:01:e0:54:37:9b:a7:78:8a:17:53:23:31:
17:67:6e:73:91:c8:f2:db:04:89:8a:72:d2:d5:bf:a9:6d:1d:
65:81:5a:92:eb:3c:e5:d1:e6:70:da:64:22:f0:3e:7c:b7:33:
d2:fe:15:45:b0:22:2c:8c:9a:79:49:b9:68:cb:5b:f3:8e:d7:
4a:67:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:21:41 2025 by rpki-client