Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: yTVrkW8Qo/tgUNgTmBqvZX2cHH1Qy9ZdPsx4//tZTPc=
Subject key identifier: A8:EF:BA:54:52:20:2B:53:E3:96:E4:61:90:09:33:76:9A:1C:97:E9
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 0198518C836CAD7794CE601DAD283F0BA105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1324
Signing time: Mon 28 Jul 2025 15:00:19 +0000
Manifest this update: Mon 28 Jul 2025 15:00:19 +0000
Manifest next update: Tue 29 Jul 2025 15:00:19 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: aMy6JoWyQUUe0VC8GVjID0896BSFs0MMpUb0kpea6dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:83:6c:ad:77:94:ce:60:1d:ad:28:3f:0b:a1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Jul 28 15:00:19 2025 GMT
Not After : Jul 29 15:00:19 2025 GMT
Subject: CN=a8efba5452202b53e396e461900933769a1c97e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:dd:01:cd:bd:4c:28:f7:ee:2f:37:68:30:
91:70:5a:d2:b5:e7:7a:d4:75:a5:86:32:cb:a1:63:
61:0d:a5:f8:ee:c1:5c:94:99:e2:e6:34:66:79:e3:
d0:20:83:04:47:00:a0:18:02:bd:2e:a3:d3:1f:0c:
e5:23:35:16:0e:1a:59:97:9b:e3:77:32:5b:f9:1c:
8c:62:88:37:26:c2:09:fc:d6:7b:2b:77:ef:0e:c1:
35:0e:0a:1d:9b:4f:91:e7:5d:9f:c7:f8:59:95:8e:
91:d9:bb:56:f3:04:4b:7e:1b:c3:0c:65:35:40:eb:
05:20:e9:9a:81:59:e5:01:0e:86:a5:dc:c0:b0:58:
9d:c4:73:10:ed:1a:94:d2:12:62:e1:40:1c:35:2f:
84:06:65:6e:39:1b:60:42:49:c7:cf:0a:24:31:74:
35:38:dc:7a:7b:f3:fc:bb:14:d6:bb:86:25:19:d4:
f4:6c:6d:4e:f9:4c:94:88:98:12:f9:8b:7e:1d:1c:
fd:3d:9b:50:4a:ce:8c:85:c3:50:f4:0e:75:eb:fc:
e8:2e:a7:7b:f4:32:80:30:cb:5b:22:96:62:58:87:
e9:4b:63:ec:ce:45:a1:fc:d9:32:fd:ab:12:ab:de:
bc:eb:8b:77:d8:d5:18:d1:df:49:81:c8:8e:cd:10:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:BA:54:52:20:2B:53:E3:96:E4:61:90:09:33:76:9A:1C:97:E9
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e7:08:54:a5:8b:1e:7b:88:87:66:e6:9c:d3:81:f5:bc:09:
45:bd:79:b4:6b:eb:99:7f:e9:61:e2:23:7b:95:df:7c:94:71:
df:45:f1:b3:13:4a:f2:61:49:91:10:35:6f:ca:d5:ea:d6:07:
36:76:01:af:2c:d2:ef:63:d8:c7:a1:29:97:30:e6:c0:cb:7d:
a4:ae:96:81:b4:57:b8:ab:a5:37:26:03:79:89:64:fb:d7:0a:
d3:ec:1b:5c:b6:20:03:1a:b5:31:4d:0e:90:25:2a:a1:0b:d4:
88:c6:a0:df:45:a0:11:e7:7a:83:11:cf:47:08:83:89:0e:7c:
c4:3c:be:3f:97:97:bd:02:1c:2a:07:58:61:b1:3e:a8:a1:90:
56:43:42:e2:05:11:37:ac:4c:82:e2:43:fc:48:3b:93:5c:82:
f0:48:0b:31:44:85:70:f3:ab:c6:45:99:61:29:ff:ed:38:10:
9d:6b:ba:f0:3e:fc:76:cf:a7:94:66:f9:88:48:ec:8c:4e:8f:
87:01:94:a6:9e:98:9c:97:89:1a:98:f2:b9:8b:e2:86:12:d0:
44:5c:a5:b1:f4:73:b8:10:93:05:b0:ae:82:b6:a6:34:e9:e2:
1d:b8:aa:8d:c6:9d:a9:79:9b:e0:b8:89:dc:c0:0c:62:c2:66:
b3:ab:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:42:39 2025 by rpki-client