Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier: 9NkyXBBIszqEN9IHzBwOociublvk6Oo+cLLtVijz270=
Subject key identifier: 66:A4:3A:2E:5C:B8:E5:19:12:3E:22:54:7E:9C:42:62:80:7B:F1:EC
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial: 01984664D14230B76C4FEC3F07F767F21472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 11:01:08 +0000
Manifest this update: Sat 26 Jul 2025 11:01:08 +0000
Manifest next update: Sun 27 Jul 2025 11:01:08 +0000
Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: ku80uaWUMD5qONZy8pyHLU3Z6BgAlqfLsq4qdAzUEXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:d1:42:30:b7:6c:4f:ec:3f:07:f7:67:f2:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Validity
Not Before: Jul 26 11:01:08 2025 GMT
Not After : Jul 27 11:01:08 2025 GMT
Subject: CN=66a43a2e5cb8e519123e22547e9c4262807bf1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:3b:7a:e8:e3:db:0b:97:61:ea:de:1e:8e:
43:69:db:1c:0a:12:8f:02:49:d6:d7:b0:aa:2f:05:
06:9b:6e:fb:39:94:8c:d1:04:ee:41:f7:a9:48:79:
28:0b:f3:dc:d2:cc:af:48:e7:94:11:2b:cf:11:c5:
53:55:e0:4c:fa:29:a3:0b:7a:db:2c:a6:07:35:a5:
a3:5c:39:c3:42:86:af:cd:e8:53:cc:fd:75:c0:38:
62:7a:79:6b:3c:ec:00:75:d8:f1:70:a8:6c:da:0b:
29:5a:26:ce:1a:f7:50:fc:7b:37:34:f3:af:48:28:
36:fe:93:63:22:d4:e4:c5:5d:58:36:1a:77:57:e1:
05:be:e5:ce:7b:86:64:d3:a9:f3:c5:f9:13:d9:f3:
b6:8a:48:18:8b:24:f2:48:f5:bd:24:96:79:11:ee:
b6:05:76:5c:de:58:bd:7c:94:c8:ab:6c:a4:ae:af:
80:27:36:96:6b:7d:35:1e:a7:e3:fe:13:0c:d9:05:
8f:ae:3c:27:be:c7:ff:19:17:4b:13:aa:61:b8:c8:
ee:24:ea:c6:e2:0d:e5:d7:08:f5:ab:e8:ce:54:f4:
81:94:e2:8e:77:58:49:dd:17:27:ea:51:a1:b7:df:
10:51:82:f0:13:5c:fa:6c:51:10:a2:87:a0:16:22:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:3A:2E:5C:B8:E5:19:12:3E:22:54:7E:9C:42:62:80:7B:F1:EC
X509v3 Authority Key Identifier:
keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:19:1e:b3:98:b3:d6:99:b9:b9:58:0d:99:7e:e2:de:f1:
3a:fb:94:c6:38:51:b0:7f:db:31:72:f2:ae:7d:f7:8e:ed:3a:
e8:61:13:97:18:21:66:a7:90:b7:55:09:56:86:90:f5:be:ff:
a1:c4:08:4b:2a:33:11:fe:44:ed:f5:ae:ee:1d:22:1e:08:7c:
c0:44:06:dc:32:03:a1:45:28:fc:10:46:7c:c4:f1:ac:a3:ff:
8c:61:a5:5a:51:8b:c1:9c:3e:8d:70:8b:5f:17:5c:fd:9c:fe:
c6:e1:be:ad:c8:b4:e9:96:0a:7b:f8:e4:6c:32:c4:75:f5:27:
b2:ff:c2:b5:2c:9a:62:e6:60:fd:b7:30:76:7c:8e:91:1e:83:
95:9c:68:bb:99:21:45:ae:7b:86:53:eb:9e:f5:62:0b:a9:24:
2d:fb:09:6f:cf:ee:20:72:6c:78:05:48:d1:8a:ae:8c:c6:6c:
2f:76:06:9e:0c:1a:75:5c:35:3f:72:37:6b:93:07:b2:55:42:
b8:19:c6:73:30:71:1a:5c:7e:0d:b2:ef:31:1f:c8:01:fb:7f:
a2:2c:9d:05:e1:3e:f1:2a:84:c0:9c:40:ce:2a:4d:ef:60:77:
ea:6f:53:7e:02:f4:ff:b9:f7:fa:ce:68:0b:60:b2:30:b0:39:
b1:92:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:11:02 2025 by rpki-client