Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier: tsnQ7GmcXpY+4uc5qxPiaOPu6T9WqciIOHW8MgymnDc=
Subject key identifier: C4:B3:F3:1B:37:D7:1B:8C:6F:EF:24:5A:69:28:8E:14:57:DF:B3:F5
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial: 019847E4BF3B5048AE5995D9401B6F3F6917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number: 0654
Signing time: Sat 26 Jul 2025 18:00:30 +0000
Manifest this update: Sat 26 Jul 2025 18:00:30 +0000
Manifest next update: Sun 27 Jul 2025 18:00:30 +0000
Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: X5z/7pB39Cnug4deIlpGP2gT9SonbgzgXAQYZ+32Hho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:bf:3b:50:48:ae:59:95:d9:40:1b:6f:3f:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
Validity
Not Before: Jul 26 18:00:30 2025 GMT
Not After : Jul 27 18:00:30 2025 GMT
Subject: CN=c4b3f31b37d71b8c6fef245a69288e1457dfb3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:0e:43:af:a4:b8:17:33:fa:8f:ef:b0:44:
ff:8b:84:93:3f:70:a7:83:89:65:cc:99:84:47:f4:
fd:90:aa:b7:12:05:d5:13:74:c9:35:ab:6c:41:b2:
c9:c1:4e:bc:8a:d9:34:c0:e3:f8:7d:a0:c4:91:2b:
42:bb:89:70:08:88:95:2e:bf:21:d7:bf:86:5c:77:
14:5c:10:32:d2:97:0e:5f:eb:4a:76:f5:58:ca:a5:
42:4d:46:f9:40:b4:78:17:b4:ed:31:9c:5d:3a:28:
4e:05:41:4a:aa:28:16:0e:e7:d6:78:a9:24:21:a7:
78:cb:10:c2:f0:87:c5:ea:41:c9:3f:58:b0:31:81:
58:88:c7:2b:35:0a:77:f4:6b:47:6d:0d:5c:9e:4a:
70:3b:4e:6f:cc:6f:e2:ce:14:c9:8c:41:e3:64:03:
22:d9:0a:aa:9e:d9:39:14:f8:cb:43:93:7e:6d:09:
8b:8b:66:28:f9:8b:22:98:23:fc:1d:aa:7a:13:4e:
95:6c:b2:bc:4c:3d:5e:ca:5c:d1:6a:7f:b4:5e:1f:
c3:a2:74:29:e1:ef:3e:30:b8:d1:e1:34:2e:6a:4a:
e3:de:ba:91:0b:f0:ca:b4:61:93:09:38:63:ae:c9:
41:bc:ce:46:c8:f3:48:64:1e:cc:b1:3c:de:a5:53:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:F3:1B:37:D7:1B:8C:6F:EF:24:5A:69:28:8E:14:57:DF:B3:F5
X509v3 Authority Key Identifier:
keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:66:5e:8b:e4:f5:64:6b:85:c5:7b:dd:42:40:05:7d:61:51:
48:4d:01:5c:b8:02:e1:49:7d:3c:87:63:84:d9:0d:17:00:49:
5a:34:96:15:48:77:7a:e4:5e:7c:7b:0e:bf:1c:b0:9e:e1:d4:
5b:53:a0:35:8e:74:eb:25:95:57:35:0c:8d:3a:c0:ee:d5:83:
f2:cc:e8:e1:79:eb:5f:f9:11:ad:20:6c:91:5f:6f:44:62:4c:
9f:56:61:10:cc:1e:73:d2:d4:f1:a6:e4:98:89:22:e8:06:e6:
5d:f3:b3:b1:74:08:fe:ee:12:e2:52:08:26:d1:42:e1:ef:0e:
62:bc:89:24:6b:63:aa:4b:51:06:99:4f:47:2e:26:1e:62:64:
68:74:8e:cd:66:aa:72:3c:a9:f5:95:5f:bc:91:39:d9:03:98:
af:9a:6d:98:d7:c3:4e:6c:13:65:e8:1f:e9:aa:a9:51:e6:3c:
98:fb:af:fc:e6:ee:73:95:64:40:c2:b7:68:5b:5f:87:11:6e:
8d:6f:cc:67:d1:ed:14:55:f7:78:11:f6:ec:ce:f7:f5:b8:fe:
bc:b2:16:f7:32:d3:a2:8d:b0:41:0c:45:2c:1f:a5:56:6b:5a:
30:6f:0b:ea:29:6b:38:db:eb:31:87:31:7d:2c:5f:5b:11:8b:
16:27:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:18 2025 by rpki-client