Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: 4E6UTYoDY1FEUIwRRRF+tGG/CFBXV1p/r0zK215Jjnk=
Subject key identifier: 3B:53:60:1A:42:DC:E8:7B:E8:36:87:E7:7D:41:D5:DE:DC:7B:44:CB
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 0199239F2C5E9ACEFFB15C2207886DD5C441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 1403
Signing time: Sun 07 Sep 2025 10:00:57 +0000
Manifest this update: Sun 07 Sep 2025 10:00:57 +0000
Manifest next update: Mon 08 Sep 2025 10:00:57 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: myQ8LBVl9DrE0SBpu/E4qH5LVnL0yBOOBxGIlRJxbV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:2c:5e:9a:ce:ff:b1:5c:22:07:88:6d:d5:c4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: Sep 7 10:00:57 2025 GMT
Not After : Sep 8 10:00:57 2025 GMT
Subject: CN=3b53601a42dce87be83687e77d41d5dedc7b44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:c4:6f:4f:d3:4b:15:9e:68:d2:84:9a:0c:
5a:b9:96:ac:96:8c:cd:0b:3e:12:58:13:ef:46:7e:
7c:99:c8:0d:df:dd:27:59:8e:ad:b1:b1:91:68:27:
b4:a0:12:6b:0c:79:8a:cd:b3:8f:eb:be:bd:a9:da:
96:82:9b:2a:fe:92:87:ed:05:6b:e1:bc:95:ca:0b:
52:71:17:67:13:5e:0b:a8:7a:28:bd:b1:64:d9:da:
c4:3f:eb:6b:b2:93:60:78:f7:b2:38:4e:6b:5e:74:
80:0f:9c:ac:02:e0:78:82:fd:72:7a:08:19:a6:46:
f4:43:20:b5:37:e5:d5:ac:91:7f:cd:f3:4d:3f:e9:
9f:da:87:f5:c2:3f:21:f9:f5:80:4b:9f:d7:fb:d6:
82:f4:db:3f:12:a6:0d:9b:b3:58:18:5a:d9:90:c3:
6d:8e:d6:c8:d9:58:91:b4:c3:b0:e8:3b:d8:95:52:
14:08:a4:61:d3:79:7d:8f:c2:d8:95:cd:e3:77:be:
5b:3a:f5:7e:13:7f:f9:f7:e2:8b:ab:53:c4:8b:4c:
fa:e5:5e:0c:74:1f:c9:1b:00:52:76:51:f0:36:b0:
55:d4:94:c8:07:d1:74:ad:bd:b8:0d:76:1b:f3:d7:
a8:71:f8:8f:35:07:ea:f1:28:5d:7c:c8:3e:44:d4:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:60:1A:42:DC:E8:7B:E8:36:87:E7:7D:41:D5:DE:DC:7B:44:CB
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8f:81:2f:3e:74:b8:8f:eb:93:8f:f0:c7:b8:ea:36:c9:6a:
99:e9:64:44:19:6d:42:ab:d2:58:00:7b:33:0e:e0:48:e0:f3:
b4:43:8b:dc:f6:8b:fc:fb:2e:70:91:e9:59:22:d2:05:fe:4a:
2f:05:aa:33:6d:49:d7:b1:6f:55:01:54:b0:0a:00:0e:89:53:
b5:de:fe:94:12:33:8f:55:10:7c:2e:19:20:36:46:93:7f:46:
e9:96:ba:ea:9e:35:3d:d1:ab:57:cb:ed:bf:19:86:c1:33:6d:
07:41:45:74:47:43:7b:79:9f:b1:24:ae:7e:82:b3:91:62:ae:
05:82:e7:92:86:c3:ec:d5:58:83:0b:b7:04:ff:ee:0a:6d:1d:
2c:d5:1c:d3:06:7a:f3:5b:cd:3d:2b:68:e3:85:23:22:37:11:
79:4f:8d:2f:49:a2:e6:e4:ba:05:65:0e:8c:7e:2c:c4:f1:61:
53:b6:01:e8:41:ed:b3:a0:7f:21:db:48:27:7d:2b:ac:bb:b7:
e5:44:6f:7e:31:b4:27:1a:c7:f2:32:e8:f8:1b:07:33:29:16:
3f:d2:ea:fa:f5:06:16:37:be:65:ac:40:8f:5e:92:ba:0b:94:
ed:ec:5f:f8:ef:7c:71:84:b7:ff:e0:e1:65:aa:d2:5d:e8:84:
46:ce:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client