Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: +BzuexGRY5uVTecCPau9PJk4sJaHua4z/sXRM2nXRRg=
Subject key identifier: 30:C2:B8:A0:B5:81:EB:E8:00:C0:6F:D5:5E:8B:16:34:44:40:D4:C5
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 0198477857E59A245D214C29DF33F7A485C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 0663
Signing time: Sat 26 Jul 2025 16:02:05 +0000
Manifest this update: Sat 26 Jul 2025 16:02:05 +0000
Manifest next update: Sun 27 Jul 2025 16:02:05 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: s+ORGYj/gxYMqk7CCjJYXd89/DETOKodSekOvHdJHxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:57:e5:9a:24:5d:21:4c:29:df:33:f7:a4:85:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Jul 26 16:02:05 2025 GMT
Not After : Jul 27 16:02:05 2025 GMT
Subject: CN=30c2b8a0b581ebe800c06fd55e8b16344440d4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:1e:24:a7:d1:2e:7f:cd:68:60:94:90:8c:
b5:6d:9e:05:4d:96:b1:6c:5c:93:d9:dd:a7:1a:30:
1b:02:f9:52:79:92:00:ca:e6:db:fe:84:a8:e1:01:
bf:d3:5a:79:44:a1:e3:58:af:0c:55:79:98:b1:2b:
2a:05:a9:2c:e1:01:1d:45:17:11:fb:9f:c7:8f:36:
b6:e1:9e:71:54:73:1f:af:a1:f5:97:81:6e:0b:c8:
cd:24:55:bb:1b:39:2c:e0:e9:d8:1c:f5:60:c7:fd:
e1:33:34:74:bd:46:5b:42:cd:8e:98:6a:56:b1:8e:
ca:c2:3c:88:e6:6e:16:d4:a0:30:c3:67:cf:2a:7d:
9c:e0:ed:49:88:80:fb:bf:7e:ac:01:ed:3e:58:f2:
84:4c:85:cc:b0:f8:6b:08:84:69:b5:f7:1f:05:ca:
a3:c1:b9:9b:ac:c4:ba:85:0f:55:00:47:6e:4d:37:
b7:80:d8:3d:17:87:a5:1c:8a:b3:7e:51:59:3e:2d:
c7:9f:f9:cd:e1:ac:06:0b:d2:e4:57:90:08:98:1b:
67:98:b9:fd:fc:f6:25:a7:3f:9d:84:ed:70:12:46:
28:1d:8c:ad:57:0a:5d:ad:dd:4d:4c:4f:13:91:cb:
4b:29:ac:a9:25:d6:65:d0:05:e9:14:6b:28:d5:83:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C2:B8:A0:B5:81:EB:E8:00:C0:6F:D5:5E:8B:16:34:44:40:D4:C5
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:94:11:7a:7e:49:fc:33:eb:68:1c:70:e6:3b:4e:fe:d9:4d:
8f:45:40:af:26:12:d1:15:63:ac:cb:7a:94:f1:28:59:f7:69:
b4:48:80:30:de:06:56:d5:c7:d3:62:dc:54:50:5a:cd:f6:9b:
a4:07:27:9a:69:4d:a9:df:19:a1:61:b8:79:3c:40:79:7a:b3:
b1:3c:2b:5e:4c:98:96:97:30:a3:4b:53:ce:9d:e4:89:43:44:
75:19:fa:cd:25:5e:d1:20:0f:f2:62:d8:24:ba:bd:c8:f5:e1:
5d:38:e4:a6:86:8a:b0:63:9c:48:5c:a6:87:9b:b9:43:98:d8:
1f:35:05:11:85:86:59:98:ec:9c:90:a4:db:62:0c:9a:f1:a2:
29:2f:7b:63:33:0b:7e:1c:61:17:cf:a0:1b:08:9d:a0:fb:30:
83:1e:62:0d:2e:74:a3:8d:0f:7a:38:7b:28:31:a2:16:fd:36:
bc:96:ae:3a:ea:16:e1:18:e7:7c:fa:06:37:39:c4:0c:07:ef:
bd:33:11:95:02:b0:06:89:e4:36:b1:38:a7:f9:39:2b:dc:1b:
74:b2:a0:63:f1:7a:f4:72:09:82:c9:6b:b4:1a:99:38:ce:bd:
23:d7:ae:5f:0f:65:98:8c:e2:e3:bb:35:e3:99:cc:27:f2:57:
7d:31:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:32 2025 by rpki-client