Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier: p8LFKNQbcoY+FuBFuV0buYdVq9V+PfSEQ1fp5woer8Y=
Subject key identifier: 44:4D:96:74:F7:AB:12:E2:AF:E8:69:17:66:E9:7B:62:9B:56:37:86
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial: 0199228CD21789367B80C6F5111E72593012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number: 1069
Signing time: Sun 07 Sep 2025 05:01:17 +0000
Manifest this update: Sun 07 Sep 2025 05:01:17 +0000
Manifest next update: Mon 08 Sep 2025 05:01:17 +0000
Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: EXYyctTuh+vLAb3sxWMKN9Rq4Vt+Fn1S838Xg+/bS94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d2:17:89:36:7b:80:c6:f5:11:1e:72:59:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Validity
Not Before: Sep 7 05:01:17 2025 GMT
Not After : Sep 8 05:01:17 2025 GMT
Subject: CN=444d9674f7ab12e2afe8691766e97b629b563786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:b6:aa:3d:15:d8:8e:bc:cf:01:0a:58:bd:
c6:75:58:e9:84:2b:aa:9a:fd:98:4a:68:f6:1b:75:
c0:89:6e:78:59:27:06:d1:ba:8e:72:85:8d:f8:d6:
97:d2:6e:70:b1:77:ac:ab:8b:ee:81:f1:11:7c:b0:
e6:c1:b6:3e:85:b2:2f:aa:e1:28:91:a4:ce:de:af:
1c:9e:60:0a:34:a3:7e:3d:ab:e1:c5:4b:aa:63:15:
19:8c:a2:6f:01:8b:20:67:ef:a8:11:d1:be:ca:3e:
1f:c6:f1:9f:b1:9e:a5:54:4e:e3:49:34:28:22:d8:
ef:4a:b2:cc:80:14:2e:bc:0a:38:88:80:8c:3f:17:
33:55:3f:85:2c:5e:7a:57:a6:01:72:76:41:05:f9:
2a:b5:68:62:d2:6c:9a:b4:57:51:85:13:b7:f1:b9:
3f:12:75:67:15:d8:43:81:f2:df:c5:23:25:fd:85:
eb:93:24:29:eb:8e:e8:76:b3:be:4b:98:f6:50:9e:
aa:8a:56:8b:9c:65:b9:21:fa:3f:9f:bc:fc:5f:4e:
43:8b:be:da:67:8a:60:94:3e:2a:12:1d:aa:32:cc:
b3:b2:62:2e:7c:a8:7a:92:a9:c1:83:9c:89:38:c8:
66:eb:74:c2:d6:a1:d7:fc:4a:55:68:8a:a6:e6:47:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:96:74:F7:AB:12:E2:AF:E8:69:17:66:E9:7B:62:9B:56:37:86
X509v3 Authority Key Identifier:
keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bd:f7:d3:f4:8d:bb:6f:f2:3f:16:da:3c:c1:07:91:5f:7b:
65:f3:46:c8:97:60:2b:66:a0:d5:d1:89:5a:f5:bc:ef:e6:2b:
ae:b5:f8:85:1e:38:0f:d2:07:38:4e:b6:1f:68:d5:81:ab:04:
34:7f:c7:35:d3:cf:92:b0:8e:8e:47:95:4f:b1:67:ed:28:ad:
19:48:bb:ce:b2:59:af:b7:f7:34:9f:71:bb:b8:3d:df:49:ce:
1c:db:94:28:96:2b:99:a3:ed:74:c3:77:af:fd:64:5a:94:69:
d6:02:88:5d:e4:4f:c5:6b:68:39:b8:4c:e4:c0:ed:b0:11:dc:
92:a2:fd:5b:cf:26:78:8a:fe:e4:30:32:40:2d:51:1c:22:da:
5f:2c:b1:51:e3:8b:78:03:40:cf:ed:76:52:61:20:ad:b4:0f:
f3:28:bc:84:2e:1a:7c:9b:9a:ea:20:ce:53:83:54:dd:5e:1c:
2a:19:07:b0:38:fb:62:6f:18:b7:3f:31:dd:e6:26:6b:95:fb:
ca:bc:d8:6d:55:d6:63:f7:02:9f:59:c1:0c:2f:ea:d0:db:4a:
04:cf:35:c8:9e:bd:09:5f:ee:a6:65:f2:84:1f:bf:01:02:63:
67:47:65:cd:33:9f:8b:df:11:c7:31:4a:05:f0:82:36:18:e0:
ec:9c:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:24 2025 by rpki-client