Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: Y9PM6w1onLdt9nzCiE2sTIiUz/atqXuz3NERTsZHeLc=
Subject key identifier: 2A:5F:60:E5:E1:21:F9:9B:C4:39:39:68:3E:E1:28:07:90:64:25:25
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0198439A13F16A4AAA9405C420782514BE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 02D7
Signing time: Fri 25 Jul 2025 22:00:27 +0000
Manifest this update: Fri 25 Jul 2025 22:00:27 +0000
Manifest next update: Sat 26 Jul 2025 22:00:27 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: rz62I24hZLDIOB5AM68i7hmDeiHn8Tsm5E9knur1Oc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:13:f1:6a:4a:aa:94:05:c4:20:78:25:14:be:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Jul 25 22:00:27 2025 GMT
Not After : Jul 26 22:00:27 2025 GMT
Subject: CN=2a5f60e5e121f99bc43939683ee1280790642525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:92:4e:38:bd:c7:bb:2a:45:3e:e7:84:5d:
48:f7:28:07:bd:37:d8:93:40:ca:3b:05:ea:10:9f:
4d:1d:bc:ef:43:89:42:1d:43:aa:5d:b3:cf:4e:d1:
fc:51:2c:98:6b:a5:b6:2c:7b:9f:0d:18:cc:a3:11:
43:66:70:e8:96:8c:df:17:51:c4:e1:c4:a0:5d:a8:
36:f4:fa:ec:6f:ba:c7:b0:99:0b:1e:50:77:1d:8f:
74:5f:2c:b5:61:5b:55:76:d6:a8:95:03:66:62:ad:
35:bd:44:d8:ac:e0:2b:f4:a6:6b:21:34:87:af:13:
25:41:b0:45:f5:79:0d:4a:ae:4b:3b:3d:ca:43:bf:
3e:a4:33:37:3c:70:c0:20:3e:91:9a:7b:d5:74:3c:
7e:b0:a7:1b:81:4f:91:a1:c8:99:47:2b:6b:8f:4f:
9b:df:bd:eb:7f:77:f6:b3:da:8a:29:ae:6a:be:99:
28:c7:fc:04:a3:21:17:c5:26:a3:55:72:9f:6a:d5:
6e:a5:d0:ce:54:42:2f:23:dc:96:21:f3:a8:58:65:
24:6f:84:2e:cc:ae:5f:c7:d1:bd:34:81:f9:97:a5:
28:a7:26:be:3e:67:78:62:a4:a4:da:96:fc:fe:a4:
46:1f:b1:73:57:d6:a0:da:ab:99:a8:5e:f5:b2:15:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:60:E5:E1:21:F9:9B:C4:39:39:68:3E:E1:28:07:90:64:25:25
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:fc:d4:2d:34:e1:ce:97:a8:80:ec:ab:1e:db:5f:11:5d:
c9:5d:6e:53:3d:b9:38:1b:d8:52:ed:e2:3e:08:ad:cb:f1:88:
2e:6b:93:28:93:8c:3e:ba:48:f8:e7:93:73:9f:23:15:c3:81:
87:9e:44:a7:a8:30:f2:b9:37:49:7e:9c:55:9d:14:fb:70:ae:
78:b3:6e:3c:d4:9e:9a:69:b9:db:dc:30:40:39:12:52:17:19:
30:97:4b:2c:8e:fe:ec:37:29:a2:00:38:33:44:98:0a:47:dc:
db:47:7b:be:e8:2e:3d:00:e7:c7:25:d2:fc:49:79:b5:af:c5:
18:d9:ca:da:8e:f5:97:b6:c9:bf:5d:0d:d6:3d:d7:7c:aa:63:
b1:70:3f:c9:71:85:85:ec:0d:9e:47:42:01:6c:7d:e8:92:53:
5d:bd:d6:a4:9a:89:fb:34:21:01:4f:33:63:d8:af:6e:0b:47:
4b:0d:3f:ba:e8:e8:aa:4f:0c:e8:67:11:d2:7e:d0:24:e4:75:
ea:89:bb:58:c3:52:bc:5c:1b:45:8a:19:0c:a5:1d:b6:68:69:
33:54:fd:59:4c:8e:80:83:85:f8:a4:2b:9e:c4:c4:a9:70:fc:
d2:e7:76:bd:6b:0e:ed:40:c1:a8:61:b5:a7:b6:85:bb:b4:57:
ca:db:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:44 2025 by rpki-client