
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: 7BooEdPUnvS+gncKoo1XwbGv03Jjvh2ZzGRRE9DIcAk=
Subject key identifier: 57:F9:03:5B:36:5E:15:FF:B1:8A:BE:D9:92:9E:3A:EC:3C:3D:15:5F
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 01992443E7898A0646D49864CB6903D59C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 13D7
Signing time: Sun 07 Sep 2025 13:00:53 +0000
Manifest this update: Sun 07 Sep 2025 13:00:53 +0000
Manifest next update: Mon 08 Sep 2025 13:00:53 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: 6/LecIn9LOXK+2YYzhlSXQ73nJTdFKFNuzxMmmNO9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:e7:89:8a:06:46:d4:98:64:cb:69:03:d5:9c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: Sep 7 13:00:53 2025 GMT
Not After : Sep 8 13:00:53 2025 GMT
Subject: CN=57f9035b365e15ffb18abed9929e3aec3c3d155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:7a:1d:3c:19:ce:70:27:82:3d:64:7b:07:
31:b7:c4:d1:9d:eb:93:ea:7c:c4:53:19:06:15:8d:
db:1e:e0:ef:49:2b:6e:fd:3b:95:e1:98:f7:cc:7e:
33:c4:04:9a:04:2b:2a:9f:0b:ad:61:80:81:68:b9:
c1:94:eb:83:cc:a1:cc:d4:73:c2:22:39:d1:e0:e6:
c3:d6:1f:a6:3f:06:03:a3:25:46:f3:c9:b8:b2:10:
ef:95:70:a9:1f:cb:85:81:ed:ba:28:72:03:73:11:
53:3c:5e:4f:84:b6:c9:f9:85:36:6f:5d:4c:7c:25:
dd:af:fa:ce:d1:f0:a8:83:ce:47:7f:99:89:2d:99:
a7:9f:c0:3a:a4:79:57:f1:0d:e3:34:f9:16:94:02:
04:aa:39:f1:6c:db:4f:a7:8f:d0:0e:93:f5:d8:95:
eb:c4:0b:e7:70:c0:73:ac:91:20:54:47:59:e9:39:
34:0f:e4:59:9d:45:b6:ce:b5:02:9b:91:90:6a:42:
ed:de:87:d2:1f:d2:5e:d5:ca:3f:f3:68:de:be:2e:
c4:1e:b1:b4:d5:12:3e:ab:cb:31:68:0f:ce:5a:9a:
80:77:07:37:41:bc:e9:da:22:8d:67:e8:d5:20:4b:
06:84:51:0c:a3:d1:d3:fc:67:50:f9:b1:78:cd:91:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:03:5B:36:5E:15:FF:B1:8A:BE:D9:92:9E:3A:EC:3C:3D:15:5F
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:df:1d:93:1f:7c:59:3c:31:fe:b6:fd:79:4c:4e:5e:8a:
9f:0f:cc:a7:61:33:0b:ee:70:f1:f2:eb:81:65:02:b7:c3:63:
02:c4:78:47:7b:69:9e:6e:f3:24:02:5d:dd:8d:99:d4:72:8a:
47:1e:0f:f0:24:b1:de:25:f2:4a:3a:a5:d3:82:ad:90:6b:87:
b8:fd:bc:16:e5:9d:a6:19:b7:a1:64:11:10:b6:5e:b4:88:ce:
49:e9:e7:66:98:58:8a:8f:4b:09:cd:62:5c:53:c8:4c:e8:71:
b8:e8:45:76:fe:db:58:c6:3e:0c:ce:0d:2a:c8:c4:e7:bc:5d:
90:dc:d2:8c:38:bd:33:82:67:66:f5:67:b9:be:53:c6:21:1f:
65:5b:ec:c3:e0:1a:08:f4:51:21:4c:01:0f:fd:72:bd:aa:5e:
28:54:e2:e6:12:70:11:54:26:3f:98:ae:3f:20:32:81:4e:22:
b1:10:5d:a7:c8:ee:ed:ab:c6:0c:66:f6:43:59:a4:d2:da:e2:
0f:47:88:cc:ca:34:71:2f:9b:0b:41:5e:a4:98:ff:55:1d:85:
9e:2e:60:f3:f7:61:4b:25:f5:2c:8c:21:c6:b5:40:f6:e0:5c:
ad:99:3d:c7:e6:83:1d:1c:70:63:2d:ad:98:a5:7a:58:96:9d:
46:7d:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:37 2025 by rpki-client