Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: OzEmlLZk59FWR3IApO79HF7iq3A8WiJ6I+5e98kyDg4=
Subject key identifier: 12:10:F4:FE:2B:B2:61:20:70:40:34:3E:A3:2A:DB:B9:23:0D:DB:ED
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019847771E0C8700F6C09C93108AF07A840E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 11C4
Signing time: Sat 26 Jul 2025 16:00:45 +0000
Manifest this update: Sat 26 Jul 2025 16:00:45 +0000
Manifest next update: Sun 27 Jul 2025 16:00:45 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: yHFiaWe8LTHLdwFyS9UOWvQaIUv8V+qM0X/sc7QkkUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:1e:0c:87:00:f6:c0:9c:93:10:8a:f0:7a:84:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Jul 26 16:00:45 2025 GMT
Not After : Jul 27 16:00:45 2025 GMT
Subject: CN=1210f4fe2bb261207040343ea32adbb9230ddbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:50:9c:3f:46:51:02:07:6f:c6:ab:e4:b6:
b2:9f:4a:04:bd:f8:a5:49:8a:a1:7d:71:75:58:23:
8f:df:2d:8a:c1:55:f2:88:d0:2d:53:2d:26:45:5f:
2a:88:b3:f7:e6:b5:6d:7d:7b:bc:b7:97:aa:74:99:
b0:84:ae:81:1d:cb:f8:63:25:6d:b5:16:90:95:00:
41:38:67:4c:d8:7e:67:a6:b7:29:5f:7b:04:80:6c:
36:08:be:17:a2:27:e7:4b:fa:4d:81:e1:80:74:7b:
9a:ff:52:27:48:c8:bb:cc:3f:80:03:f2:24:67:17:
7a:3b:c7:fa:1d:18:78:cd:20:bf:b9:55:de:6d:5a:
f3:7f:0b:f8:79:5f:04:b9:59:0f:b6:18:92:89:b0:
ef:74:e6:9a:fc:c7:1a:8e:fe:82:07:58:07:c1:c7:
97:1b:b2:ba:f1:2a:3b:e6:5b:00:b4:08:06:b6:71:
b8:b5:e7:be:4f:3a:a5:e1:24:4c:38:34:ab:1f:5c:
12:22:22:f9:10:b8:2b:70:0c:89:4f:ce:bb:8c:a6:
5e:11:5d:1c:e6:cc:89:76:32:b0:b8:65:05:5b:db:
58:00:c5:79:6c:0f:a8:29:7e:f2:e0:e9:0c:b4:3e:
e8:b2:cc:11:7c:93:29:be:51:57:fa:f9:db:05:d5:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:F4:FE:2B:B2:61:20:70:40:34:3E:A3:2A:DB:B9:23:0D:DB:ED
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:c4:27:45:41:88:a3:2f:52:6b:44:db:32:6a:d9:3f:5b:
61:4b:f7:1f:4d:08:dc:28:a4:74:83:3f:81:8a:36:b0:4a:bf:
6c:d8:7d:16:e4:c0:ab:60:73:13:ac:cd:d2:1f:c4:d7:99:e9:
ec:c9:f9:7e:10:ac:d3:99:f4:c4:9b:86:56:f3:db:ef:ed:48:
f7:ff:4d:cc:85:05:d2:cc:ee:59:cb:d1:55:cb:f0:24:35:24:
62:dc:a1:4e:fc:a3:1f:e5:65:cc:d3:e6:d2:6a:51:c4:5a:9b:
34:21:8c:51:96:3c:b0:a6:13:18:ee:eb:bb:5e:0e:3d:77:05:
9c:47:db:34:6c:e0:8c:a8:bd:ca:13:a1:ca:80:91:38:8e:1a:
54:38:44:f3:a0:08:f3:3b:8e:ee:5f:97:e2:9e:60:c5:99:1e:
72:3b:b6:33:e3:39:dc:02:d0:94:9a:bc:0a:d7:25:54:51:cf:
96:8e:06:a9:e8:9c:ac:05:57:be:81:97:26:68:b6:3d:77:ce:
c5:59:25:a6:2f:e9:95:05:9d:76:47:da:97:6f:1a:56:1a:17:
a6:a7:ff:0c:cb:da:ad:ba:98:9e:0b:3b:77:95:ff:db:87:42:
e0:70:d3:02:24:9d:4a:c9:21:23:77:ad:f5:70:f1:8e:f6:a1:
29:d9:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:01 2025 by rpki-client