Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: 5zcs2svxoMIatkRp2oJmE3yAfB8raiQGaCU2Y8R/KAg=
Subject key identifier: 62:BE:21:85:73:80:DE:75:DA:88:D6:38:B1:1C:09:DB:94:88:B0:84
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 01974A7AA4DA391D3A672CE4D98C3E50DD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 0F42
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: Uklx00KINTQHLmIMMylSQc+4gvNX10PziaenMt3P0ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a4:da:39:1d:3a:67:2c:e4:d9:8c:3e:50:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=62be21857380de75da88d638b11c09db9488b084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:d3:0e:de:d3:87:29:78:6f:3a:b7:de:e9:
77:e5:e7:a8:7c:e0:01:c3:31:1e:f6:43:6b:7f:30:
70:97:c8:be:d1:2d:53:18:b2:72:34:d2:11:67:e0:
6f:3b:d4:dc:a0:c5:fc:e8:2f:c6:1a:29:14:02:23:
48:d7:50:a0:2d:ed:f5:6a:91:18:22:31:89:9a:f8:
81:2f:cd:37:30:1e:96:6c:53:d2:4d:18:36:c8:3d:
88:48:c8:14:48:bc:f6:4f:33:c2:80:4e:2d:9a:cb:
f5:33:0f:ab:62:3c:6f:6e:5b:cb:df:d4:28:8f:be:
18:a1:6d:b2:7c:b9:9c:8c:09:88:48:7b:ea:83:f5:
85:9c:9c:73:9c:43:fc:03:c6:c6:55:35:6b:8f:1c:
51:4b:8f:0f:fb:eb:2c:9f:3e:59:83:be:03:47:6a:
f9:23:9c:71:b8:04:e8:8d:0f:24:6f:83:a9:ad:9c:
b9:51:b5:ba:ef:19:62:0e:db:51:41:3c:93:f0:89:
b8:99:4a:be:ed:d1:70:27:ad:06:27:d8:bf:4e:b9:
9a:99:2f:88:45:40:ad:39:d2:e5:48:84:99:f2:17:
e8:b0:3f:3f:d3:44:b3:2f:11:2b:de:73:f0:ee:7e:
b0:0c:a8:b6:57:ad:73:bb:6c:60:8a:b5:58:b6:c6:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:21:85:73:80:DE:75:DA:88:D6:38:B1:1C:09:DB:94:88:B0:84
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ca:f0:97:26:2f:94:89:cd:c4:51:de:5f:2f:36:d0:81:48:
e7:3b:eb:2a:27:4f:4d:7d:89:ef:e4:07:8e:2b:33:4e:3a:5d:
3d:1a:84:18:82:2f:1d:94:9b:9f:30:b4:3e:cc:a3:6b:99:c4:
33:9c:86:b1:e6:f4:df:58:3a:b8:11:95:38:9c:79:50:fb:a7:
2f:0d:ec:1d:2d:1a:5a:2c:c7:84:b4:2a:b8:5f:ed:10:2f:93:
9f:cf:89:02:d4:2c:ae:12:fb:ce:c4:d4:40:82:35:9f:6e:7c:
50:f9:7c:b9:56:7f:ec:1c:3f:c5:67:e4:32:14:c6:1b:2a:5d:
49:56:fe:c6:a1:cf:29:63:4c:69:8e:a7:04:c6:64:f6:be:6e:
4d:b9:62:e5:0c:52:04:c6:b7:95:83:be:58:cf:de:84:3f:05:
d1:90:89:39:3e:81:88:3c:a4:e5:0e:e0:90:e1:ee:28:c3:f5:
9c:6c:2d:87:6b:19:69:bc:24:c0:87:4a:c3:a9:32:20:62:38:
8a:c9:02:df:ad:61:de:fd:13:63:e3:23:bf:e7:3d:05:fe:b9:
db:ed:cc:36:81:34:3d:1c:7b:f2:84:f9:72:71:bf:bf:64:b3:
9b:12:ac:3f:c1:fa:0c:4d:37:9a:20:c4:08:7b:0e:ae:ae:2c:
c6:4b:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:24 2025 by rpki-client