Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File: VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier: KVKB1SG60eURyCKgPrFOrw85maVgBjsrAHuBTpXFI8Y=
Subject key identifier: DC:6D:D5:83:CF:AC:78:FD:C6:2D:89:38:43:4E:20:F9:4C:8F:67:4E
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer: /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial: 0198481C071423D2AE365891F73B413BC628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number: 0BC2
Signing time: Sat 26 Jul 2025 19:00:53 +0000
Manifest this update: Sat 26 Jul 2025 19:00:53 +0000
Manifest next update: Sun 27 Jul 2025 19:00:53 +0000
Files and hashes: 1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: bIiHvg4hcmUKJLbNWQxrQ9ErUouDlJuTs9MPTkjrq1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:07:14:23:d2:ae:36:58:91:f7:3b:41:3b:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Validity
Not Before: Jul 26 19:00:53 2025 GMT
Not After : Jul 27 19:00:53 2025 GMT
Subject: CN=dc6dd583cfac78fdc62d8938434e20f94c8f674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:dd:81:c8:b6:d1:b0:b1:cc:29:34:73:09:
a1:e0:d1:20:ea:d9:85:ab:7c:66:22:cb:2d:23:ab:
8b:30:e3:c2:83:9c:1f:cc:d3:4d:7a:81:b4:5a:c1:
8a:36:35:0a:64:ac:9c:1d:10:8a:f3:6a:29:05:0c:
5f:da:26:c7:41:17:3e:a8:c0:1d:dc:8b:d0:60:40:
56:21:47:0c:d6:d0:68:7d:13:0e:05:2c:d4:9e:67:
1f:28:e7:ed:52:e6:45:e2:95:ed:64:79:ca:15:9a:
14:bb:a2:b3:d4:d8:65:64:b1:d6:97:d1:6b:d9:f1:
6a:4a:9c:9e:39:c9:a9:64:8c:ac:76:dd:5b:26:59:
93:85:5a:31:1d:e7:fb:66:f9:88:b4:1d:08:fb:56:
9e:52:6a:2c:d2:94:0f:58:77:40:22:e6:6e:a2:89:
9b:35:d0:63:97:bd:98:f8:32:2b:3c:e3:7e:b1:b9:
29:0e:de:7b:14:26:14:ae:ea:e1:e1:0a:d0:ff:a5:
14:ca:73:24:b1:16:5f:c6:ea:02:e5:26:6f:a8:f6:
17:80:6a:23:14:7e:b1:77:78:3f:d6:7a:fa:5b:95:
4f:42:30:c4:c6:8e:8f:56:01:a8:a4:81:f4:06:32:
b4:08:fd:ab:9a:79:fd:f1:1c:19:95:ff:c9:5b:82:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:D5:83:CF:AC:78:FD:C6:2D:89:38:43:4E:20:F9:4C:8F:67:4E
X509v3 Authority Key Identifier:
keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:70:67:4c:85:83:fc:35:f3:88:79:09:27:fa:1c:38:e2:16:
c8:75:09:54:3f:38:6d:c3:eb:23:52:57:a6:92:1c:77:22:81:
8f:08:42:c8:26:93:b3:7f:e7:ee:94:f4:e3:c9:83:ce:3e:dc:
01:cc:e0:c1:33:cd:f9:1f:e5:71:28:27:f7:a9:7f:d9:a9:86:
2c:24:8c:8f:a6:94:16:91:bf:03:3b:1e:4b:5a:6d:7b:8b:7f:
b2:14:8c:09:3e:c3:63:1e:4c:ab:07:14:34:d7:74:62:76:55:
56:14:02:bc:ab:32:5e:3e:0a:39:12:81:81:62:65:aa:23:cc:
61:9d:ca:da:e8:47:6c:3e:aa:e5:fe:c4:4e:d3:8b:ec:39:25:
e5:7f:1a:2e:5e:05:f7:f1:f7:25:68:3d:ca:a9:eb:53:b7:d2:
e9:17:af:e9:1c:ec:45:53:7a:3f:e4:8e:c1:3c:e1:e1:5b:42:
ce:c9:0d:87:31:9a:66:20:44:45:5b:fa:f5:b6:a9:c7:9c:8a:
da:d6:02:09:b2:ee:d2:9e:38:01:61:d7:3c:53:ed:6e:e3:50:
5a:44:c5:a5:92:07:43:68:bf:7a:27:c9:08:7d:d1:35:4e:1d:
b7:28:61:45:61:61:ec:a1:a9:06:90:38:e9:0c:e9:20:ee:93:
ca:c2:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:26 2025 by rpki-client