Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: kAyZ0p5mLeV/qdNBEVobUtdzcffbWpOxRHEefKhomT0=
Subject key identifier: 2D:C2:9C:D2:DE:04:95:78:C5:DB:F6:4A:65:09:BD:51:5B:63:6C:04
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019848C060E3AA7246E9F76B50678490E78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0C55
Signing time: Sat 26 Jul 2025 22:00:23 +0000
Manifest this update: Sat 26 Jul 2025 22:00:23 +0000
Manifest next update: Sun 27 Jul 2025 22:00:23 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: kiCpy6PiO0Yh83zzxFzAHoeKXmmknNP4tGzcdP2YL0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:60:e3:aa:72:46:e9:f7:6b:50:67:84:90:e7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Jul 26 22:00:23 2025 GMT
Not After : Jul 27 22:00:23 2025 GMT
Subject: CN=2dc29cd2de049578c5dbf64a6509bd515b636c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:d7:5f:47:5f:3d:45:7e:25:a1:ed:b2:ec:
03:f3:71:a4:e4:4b:d6:44:a6:03:9d:43:45:1f:e7:
c4:5a:61:f3:e6:20:c4:ac:f5:83:cf:84:ff:e7:51:
c7:6c:c1:2e:62:3b:14:89:26:26:32:d2:41:2e:3c:
b3:75:93:3e:d4:d1:a2:76:f5:7a:33:35:ec:8e:86:
d2:5f:0b:db:d2:6a:f5:ec:d5:51:16:09:f1:7f:73:
4b:db:bb:79:cd:78:23:59:25:a1:a0:31:bc:78:83:
4e:95:3b:eb:8b:a4:41:30:c3:7b:ca:47:71:84:9c:
e8:b5:ce:ba:ed:e9:7a:c1:17:7a:3d:5e:c4:64:0d:
44:41:33:a9:09:bf:c5:5c:48:ac:31:f7:c5:dd:9c:
b5:0a:9a:6d:14:3f:ea:59:2f:9c:d3:7b:35:d1:bd:
dd:7b:87:b6:d5:3c:bd:fa:98:6d:d3:20:91:eb:15:
a8:f5:46:b9:1b:6c:a4:ac:f0:f4:b8:1b:a6:7e:28:
cb:96:93:e9:73:27:16:40:ca:44:0b:ea:2b:f1:60:
34:ed:cb:88:71:be:d5:a1:c3:fe:39:fe:65:91:ae:
b8:21:f8:f0:3f:84:2f:90:9b:82:69:d1:9a:96:41:
22:5c:53:87:99:e3:6d:c7:52:c7:1b:b3:50:4a:ef:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:9C:D2:DE:04:95:78:C5:DB:F6:4A:65:09:BD:51:5B:63:6C:04
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:cb:16:d5:55:04:d8:48:b3:60:17:60:e4:c8:a3:3f:6a:
1a:b0:22:7b:a2:94:a2:1b:1b:59:3a:2d:52:c9:55:c6:bd:b3:
b2:48:8d:fa:e7:38:61:e3:55:7c:78:5e:da:c1:f4:6d:75:77:
3a:26:7e:d1:49:2b:ff:00:9a:e0:38:86:5f:e4:84:03:fd:9a:
55:35:a1:bf:d9:0e:34:d7:77:23:92:a4:2c:c3:16:42:71:82:
f5:90:59:b0:12:98:c8:9e:18:1b:46:82:04:79:dc:66:16:aa:
65:4e:c5:ec:f6:85:5d:44:59:f6:3f:e2:7c:5c:88:5e:00:d0:
9b:d8:21:33:ca:bc:eb:32:5d:a2:ee:d9:8e:46:3a:25:fc:d6:
6f:57:12:3f:9c:ad:4a:98:20:15:5f:59:0d:82:74:5a:25:a2:
27:36:de:3b:d1:9e:75:1b:55:d2:81:10:60:e9:75:31:5e:e3:
67:09:7c:85:b1:c8:c6:d6:a0:a4:5e:e1:e2:17:17:e0:6b:78:
68:bd:19:00:f4:f5:88:53:ff:5f:b5:42:a7:28:35:b0:9d:8e:
17:26:e2:e3:de:30:b0:d9:db:b0:21:6b:65:a2:68:7a:0a:ee:
9a:58:af:98:6f:85:80:fe:8e:5d:87:7f:00:9a:a9:ef:e8:cb:
da:e0:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:20 2025 by rpki-client