
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json)
Hash identifier: MOnZ6QfcD+g/UkVrAXAkfQ7cmHdmvuVnFx7wKxjEN+M=
Subject key identifier: 89:A0:FD:28:7F:BA:BE:AF:1B:9A:32:87:28:59:F0:66:8E:95:3A:FC
Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Certificate serial: 01992443F9E73DA10BDB073CD7D6BD5908BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
Manifest number: 07D4
Signing time: Sun 07 Sep 2025 13:00:58 +0000
Manifest this update: Sun 07 Sep 2025 13:00:58 +0000
Manifest next update: Mon 08 Sep 2025 13:00:58 +0000
Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: s3Zvp/HYLvRjWwV5IwxaAMohe8ahfr5JKbTGwQoZla4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:f9:e7:3d:a1:0b:db:07:3c:d7:d6:bd:59:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Validity
Not Before: Sep 7 13:00:58 2025 GMT
Not After : Sep 8 13:00:58 2025 GMT
Subject: CN=89a0fd287fbabeaf1b9a32872859f0668e953afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:13:ed:61:81:90:f5:80:37:8d:a2:ce:cc:
b7:8c:ff:e0:26:8c:37:f3:39:e2:20:52:00:75:86:
d6:11:c7:74:04:1a:d6:ee:97:fa:dd:3e:b9:12:3d:
0e:b9:41:45:f9:e0:d7:34:b6:a4:eb:bd:62:9b:2e:
6d:d5:85:92:98:12:07:95:9b:32:5b:73:73:8a:9b:
97:95:6f:4f:3c:02:87:2c:9e:74:22:a0:48:48:38:
03:e3:b3:26:76:ed:80:54:6f:d1:24:30:f2:55:9d:
cd:9c:2d:be:9e:6e:6e:6b:8a:1c:cf:45:c8:62:ac:
8a:e6:ff:4a:e9:71:b8:e9:0b:24:c9:cb:ac:df:d6:
77:ca:b8:f4:ac:17:77:b1:44:b7:9d:8e:e4:72:49:
ed:d0:26:bc:c7:71:dd:e0:8e:81:91:34:0a:db:25:
51:f5:18:bc:2a:1c:34:93:88:15:8f:2a:3a:b3:b0:
f3:d5:b4:8c:c9:0e:9c:4e:78:fe:77:95:1f:28:45:
08:24:fa:cb:cd:eb:21:1d:85:04:9b:ef:d1:d3:7a:
50:4d:4b:aa:4b:26:e5:7e:6a:fa:e5:df:5c:c9:21:
ce:af:c8:ae:3d:53:99:73:2b:c8:e8:44:55:de:ac:
24:34:e8:fa:48:2b:0f:0d:95:53:f7:de:66:dd:68:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:FD:28:7F:BA:BE:AF:1B:9A:32:87:28:59:F0:66:8E:95:3A:FC
X509v3 Authority Key Identifier:
keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:45:ff:3d:fc:5b:22:d9:a0:41:19:63:38:d6:5b:92:d3:c0:
03:dc:8b:31:b4:e3:53:37:10:51:01:41:42:cd:1c:2f:11:3e:
01:26:b9:25:0c:43:19:b1:74:7c:2e:2d:d5:19:d9:3d:6c:ba:
6c:48:98:b9:85:88:ed:93:2f:87:3b:4c:ed:82:ec:94:bf:61:
e0:d8:e6:00:59:33:a3:3d:fd:f3:01:59:b2:aa:0e:6a:5e:5d:
f0:3c:ac:c5:6b:a2:34:8b:65:3d:3e:db:85:bd:e9:dd:00:ba:
4a:93:83:d1:ab:2c:5e:1c:a2:0a:6d:58:6b:05:29:b3:61:6e:
91:a7:f4:bc:2b:57:6b:0c:47:5d:30:c7:0f:dd:2f:20:54:9c:
87:4a:1c:81:e5:51:1a:c2:43:e2:e9:6c:27:c5:40:f0:67:a9:
0e:f0:d1:9a:c1:51:1b:dc:e9:85:2f:ed:20:69:8d:6b:0b:aa:
99:18:44:61:f6:ae:de:05:66:b4:27:83:15:f9:dc:be:43:bf:
ef:f6:6e:c4:4b:18:5e:26:67:86:2c:b2:97:57:17:b9:da:f7:
55:af:bb:29:21:8f:b7:d7:c9:5e:4a:aa:09:19:b7:bc:2c:53:
d8:92:f6:3b:50:5b:44:57:7b:b1:f1:0c:6e:50:89:a9:7e:e2:
cd:65:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:36 2025 by rpki-client