Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier: 0JIVCubWFLjBAHzFCioOpC9gxCEkbbYHKNrr6F24XfM=
Subject key identifier: 89:BB:7D:72:68:B2:EC:84:3B:51:E5:3C:4B:41:1A:D3:BE:BA:4F:47
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial: 01984B53B33ADA96C2E86E5B3097DB605AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number: 0E67
Signing time: Sun 27 Jul 2025 10:00:33 +0000
Manifest this update: Sun 27 Jul 2025 10:00:33 +0000
Manifest next update: Mon 28 Jul 2025 10:00:33 +0000
Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: O4yPipsmRq2faYTURGum9baCLExhhBURuLmXFWPBvBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:b3:3a:da:96:c2:e8:6e:5b:30:97:db:60:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
Validity
Not Before: Jul 27 10:00:33 2025 GMT
Not After : Jul 28 10:00:33 2025 GMT
Subject: CN=89bb7d7268b2ec843b51e53c4b411ad3beba4f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:4d:8a:08:40:5c:61:95:28:b0:c1:31:1c:
3d:e8:33:48:0c:3d:67:14:09:51:4b:09:df:09:05:
b1:28:e6:e3:3a:7d:09:bc:46:81:18:58:a9:3f:12:
25:64:a0:8a:34:45:6a:27:42:1b:c7:5e:8f:9a:fa:
be:5b:4e:58:cc:b3:58:1e:d7:c9:2b:55:ef:af:fd:
e6:3e:55:8d:27:27:b5:dd:19:37:8f:67:4f:84:6e:
39:de:c6:ab:80:df:f1:ad:9a:66:7b:e6:6e:3e:e8:
05:72:b1:06:2a:e5:f3:b7:1d:d0:eb:2a:52:b0:a3:
18:8e:8c:d0:49:60:51:d8:27:be:bd:97:d4:81:ee:
bd:e2:82:32:17:99:e3:7b:dc:48:fa:9d:af:6e:49:
6f:d9:2d:c0:c6:ea:54:3e:47:76:9d:00:c6:07:45:
15:7d:87:08:4c:62:97:43:91:52:52:a2:7c:b1:89:
ba:00:c3:f1:89:61:91:1c:df:1f:81:00:e5:14:98:
8d:5d:f9:39:d4:62:e6:27:bc:a0:a1:be:79:53:50:
fd:36:0e:e0:c5:27:f4:3b:92:f6:7b:ed:16:ed:44:
9b:bc:6e:f5:98:70:9e:a2:2c:84:4f:26:91:3e:c3:
da:a1:56:e0:3d:99:50:b3:70:b0:3b:2f:77:aa:6f:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:7D:72:68:B2:EC:84:3B:51:E5:3C:4B:41:1A:D3:BE:BA:4F:47
X509v3 Authority Key Identifier:
keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:27:d3:6c:eb:c7:1a:e2:1d:c5:9a:48:05:1f:fa:17:18:
4b:fe:ca:ac:79:70:ea:b6:b5:56:ea:2b:c3:84:bd:ab:25:c2:
3e:3b:ed:dc:02:00:93:07:7a:cb:a5:94:59:14:5d:81:df:65:
66:d9:7f:e0:e4:46:cb:6b:ec:97:4e:6e:da:08:29:61:d0:c9:
79:bb:06:01:46:e7:59:0c:5c:3d:b2:a1:76:8d:f6:6f:4e:27:
b0:76:c0:2c:c9:68:1e:56:08:53:df:5e:11:05:69:8c:59:c9:
0f:fc:d4:ac:fb:7c:d3:96:5e:a3:70:ea:69:dd:df:32:9c:74:
c5:93:43:1c:1c:94:cb:26:f2:85:ab:e7:65:e5:68:77:7f:b2:
0c:eb:57:2d:84:ec:83:fe:d0:01:77:05:20:86:17:b6:21:cc:
18:d6:ef:87:7a:6e:59:1b:47:f0:84:97:d8:fb:2f:42:67:f0:
74:60:62:81:88:7b:52:ad:d7:69:06:e5:a7:01:f0:2e:8b:9d:
bd:e5:8e:c7:16:2b:1b:eb:63:06:a0:79:2e:f6:92:20:3b:af:
2c:7b:18:62:38:aa:60:ac:99:ee:a3:95:2b:67:de:b5:9a:03:
42:22:7c:02:ca:e2:11:66:16:71:e9:98:27:27:03:1f:70:d7:
29:05:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:45:23 2025 by rpki-client