
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: KW6Wlc5VUwNAvlSY6A9T+fzWO879B2P0xhluVGOfo8A=
Subject key identifier: F6:3E:71:66:98:3E:7E:B6:12:34:8B:62:8B:5D:CB:01:43:F8:17:3D
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019847E4C5D5DF3464668B5481A0BE76186D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0CE5
Signing time: Sat 26 Jul 2025 18:00:31 +0000
Manifest this update: Sat 26 Jul 2025 18:00:31 +0000
Manifest next update: Sun 27 Jul 2025 18:00:31 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: eVmKRWztF+L91plgqRpoO4vwavDO4yLc8ZQLS8KvfzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:c5:d5:df:34:64:66:8b:54:81:a0:be:76:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Jul 26 18:00:31 2025 GMT
Not After : Jul 27 18:00:31 2025 GMT
Subject: CN=f63e7166983e7eb612348b628b5dcb0143f8173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:2a:67:1a:5e:02:bd:8e:10:6d:df:36:b3:
20:15:da:30:4f:36:db:32:e1:77:ed:5c:51:12:d1:
8f:66:0e:d9:0a:20:66:ac:a3:73:17:1d:5e:f0:1e:
81:a6:3b:62:3c:d4:40:f4:d4:13:a2:ff:96:7f:ea:
97:7e:27:82:ae:4a:7f:53:5c:25:bb:7b:52:e0:13:
2b:99:30:d1:74:47:73:7b:a7:7a:b0:7a:c5:db:d9:
69:b2:95:97:33:b6:43:e8:07:71:e4:22:8b:6c:91:
0b:f9:7b:e8:b6:83:34:1f:fb:9d:ee:f8:1b:ce:36:
0a:55:be:ba:e7:f9:a7:27:3a:c3:f2:c3:c0:cf:9f:
f3:17:22:25:3a:1f:e6:22:ba:55:2d:46:3b:d4:78:
a1:2b:13:35:e2:7c:f1:bb:56:f0:f8:5c:54:bd:3a:
80:7f:9b:4b:f1:a1:03:ec:9c:78:72:2e:ca:d0:f7:
45:04:2b:51:cb:98:e9:67:52:c8:d0:c8:97:c5:1f:
67:c9:59:d7:1f:60:20:2c:51:82:e1:37:54:ee:a2:
7a:5d:4e:c6:ee:39:ca:de:ce:2e:af:4e:55:ae:e5:
3a:47:1a:53:e7:54:fb:e3:4b:98:a1:fd:0e:cc:ab:
77:8e:99:e9:71:d5:70:ae:88:dd:f8:75:05:ec:da:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:71:66:98:3E:7E:B6:12:34:8B:62:8B:5D:CB:01:43:F8:17:3D
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9c:c9:33:35:4d:27:f1:09:ba:ab:68:73:53:79:c5:9f:f9:
a8:8e:8c:ba:18:44:e2:44:19:46:cb:76:10:7d:dd:a4:d7:a6:
85:41:e8:c0:33:ba:eb:22:72:95:94:96:7b:16:4d:aa:53:65:
37:df:29:7c:23:28:af:d6:61:ed:f0:62:87:53:9c:03:8f:f3:
1c:20:f5:a0:5a:29:74:bf:06:db:61:70:bd:e5:cc:b0:4d:9b:
2b:a7:3a:e6:41:92:ce:ff:9c:eb:b5:63:5d:56:9a:8d:66:e2:
65:b9:c4:09:64:7b:d0:ee:45:6d:4c:77:0a:81:65:ce:f4:46:
82:6b:df:5e:e7:13:7c:e9:0e:74:f2:1a:6e:46:d8:57:4e:b2:
01:90:cb:6e:b3:18:d8:e2:57:ce:1c:f7:49:f7:f8:89:93:11:
94:89:a5:eb:74:c5:8f:06:f8:4e:c4:c4:10:a0:e1:85:f9:5c:
a5:17:e6:48:05:47:97:45:16:1c:e6:c0:16:db:0e:b5:0d:5b:
c6:25:c7:13:d9:e1:6a:39:0b:20:ce:6c:a6:65:db:25:99:70:
f5:4d:dc:8e:b4:db:d2:5d:a6:37:79:28:f2:09:69:15:4e:7f:
42:b2:72:58:ff:23:00:0b:6a:36:e6:88:66:20:24:5a:fb:2d:
dd:e2:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:16 2025 by rpki-client