Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: w7yZAYGElrCKVjO6TBu7onrCH03M0IF3zXIDsOi46e4=
Subject key identifier: 53:89:27:E7:79:66:D7:30:0F:C0:09:A6:65:EC:AE:D1:93:36:4E:AC
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 01984965431B7F8BC2DEBB86B580EE0EC3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:00:29 +0000
Manifest this update: Sun 27 Jul 2025 01:00:29 +0000
Manifest next update: Mon 28 Jul 2025 01:00:29 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: ZJEyz5ehNw2tWR1I26H8b6zyQEEQwHKHIfbVzWiPGxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:43:1b:7f:8b:c2:de:bb:86:b5:80:ee:0e:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Jul 27 01:00:29 2025 GMT
Not After : Jul 28 01:00:29 2025 GMT
Subject: CN=538927e77966d7300fc009a665ecaed193364eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:c3:a1:49:64:20:3c:aa:b9:43:c0:d8:27:
ba:6f:f8:75:4e:c2:9d:d1:85:49:94:3a:58:86:9b:
15:e8:92:7f:19:4b:aa:94:34:35:2c:9d:7a:1c:a9:
52:7d:e7:0a:5f:00:c5:cb:a0:16:96:4d:82:13:02:
00:cf:ac:3f:65:81:5d:ae:4c:85:a9:ae:ce:5a:0f:
bd:d5:38:d6:14:77:59:47:6a:b0:1d:d6:0a:07:53:
10:65:43:7e:5e:4b:fe:e3:01:ec:82:20:90:31:b4:
16:7b:6a:76:fc:4a:8b:86:10:f7:7f:cb:1e:b0:59:
fb:9d:13:f4:c2:f6:e1:d2:89:35:3f:e6:80:f4:1f:
13:8f:21:d0:0f:81:44:c3:b4:1d:f1:da:3a:c3:2d:
90:a0:0c:77:7f:0d:6a:59:3f:fa:62:09:2f:6d:b9:
d8:ca:ca:99:da:24:93:53:e1:65:bb:f1:b9:98:2c:
e9:78:0c:67:ec:31:4e:44:6e:c8:50:4b:69:5b:07:
cf:73:6f:e0:c0:67:80:9f:9a:8d:5a:6c:ba:e8:1b:
73:b4:70:80:8c:37:ab:67:5d:8e:83:66:a7:8a:84:
b9:cb:3e:41:77:34:38:56:91:25:5f:3f:0a:b9:00:
3a:03:32:57:71:d9:82:4d:ef:88:01:1a:2d:73:88:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:27:E7:79:66:D7:30:0F:C0:09:A6:65:EC:AE:D1:93:36:4E:AC
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:28:72:c4:f8:fa:12:4c:aa:ca:e0:cc:d1:99:92:3d:19:
a1:52:a5:c5:dc:92:4c:62:8a:13:da:e4:87:83:6e:e7:44:64:
7c:da:83:11:e3:62:a1:70:20:57:19:eb:57:4d:f6:8a:46:30:
a7:b4:21:b3:d3:93:1d:a9:82:cd:01:43:c6:05:e8:87:8c:7e:
11:3a:15:a5:e5:24:b5:a1:f5:99:9d:7a:2c:3d:f6:f6:b2:75:
0a:b4:0d:13:6d:8d:45:ac:22:36:70:0b:c0:fa:c0:06:a4:24:
97:1a:4b:c9:b6:e1:05:99:9f:e8:1f:7f:01:32:9e:b5:ac:8c:
0b:10:f1:29:22:0c:92:19:1e:bf:e2:92:37:d8:09:ab:46:d3:
27:0f:d7:64:e5:4c:da:44:bc:be:91:33:68:89:78:63:5b:1b:
75:f2:17:68:d2:f7:f1:89:1e:e9:c0:8b:08:ac:64:ea:bf:35:
58:c1:4a:52:e7:75:a4:67:e1:2a:2f:33:68:15:4b:a4:88:ba:
02:94:8a:63:cd:50:15:0d:66:38:62:af:a6:66:56:09:e3:d3:
6b:e3:b4:f6:b6:cc:7e:64:11:a6:ba:27:68:dd:bf:95:4e:f4:
22:57:15:8f:bb:b0:7d:68:f5:2b:37:8b:67:6d:f3:cb:27:20:
9c:4d:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:38 2025 by rpki-client