Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: 3PFlUz+AIZs/3O2DBLtJi6X3eHWIKPEWDfWemAfDM6g=
Subject key identifier: 33:01:C7:99:58:12:8B:9A:65:50:62:56:D2:A7:47:3B:5D:05:B3:F5
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 01983FBEA60BB94025FC61EAD0C752FC6D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 080A
Signing time: Fri 25 Jul 2025 04:01:55 +0000
Manifest this update: Fri 25 Jul 2025 04:01:55 +0000
Manifest next update: Sat 26 Jul 2025 04:01:55 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: 62QPlFRwobm1dN2tdAu0DqNjesEWkeQz1eMde/fZIiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:a6:0b:b9:40:25:fc:61:ea:d0:c7:52:fc:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Jul 25 04:01:55 2025 GMT
Not After : Jul 26 04:01:55 2025 GMT
Subject: CN=3301c79958128b9a65506256d2a7473b5d05b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:63:e0:e9:21:a3:f0:60:ba:37:83:4f:c4:
a5:bc:dc:c2:2d:03:5f:72:0d:90:43:fa:ab:af:d8:
41:29:44:72:1b:91:d1:1b:8e:fe:b0:de:3c:5a:14:
30:2b:78:3d:fd:00:c0:bd:41:fc:e6:11:14:d0:53:
e6:b5:07:b4:b1:28:e6:42:0c:b8:94:12:35:80:09:
0e:a6:b4:aa:2f:d2:46:8d:55:9b:d6:88:92:53:da:
20:54:fd:ca:b4:0d:07:a1:25:5a:6b:89:a0:2f:78:
99:de:d4:d9:12:4d:4b:2e:9d:fa:7b:61:68:73:11:
9c:0f:cc:c1:8a:52:b2:85:65:b9:be:c7:d1:27:46:
ed:cf:19:e6:82:40:37:ec:90:d9:66:5a:25:0b:55:
3b:df:fe:c5:2f:d6:0c:b6:47:c0:69:35:41:25:32:
c5:47:22:61:37:b8:69:26:b1:7a:23:1a:11:76:3c:
0c:ce:3e:d1:65:84:ea:74:e4:4a:62:06:02:54:9f:
7b:b9:e7:d5:73:79:2f:96:51:ac:e8:bb:ab:7f:66:
ff:aa:4b:7a:26:c3:1a:79:82:5b:35:92:85:cb:0f:
02:8b:42:bc:82:c6:ef:46:5a:7d:6b:4a:fa:27:a7:
90:35:38:bf:d7:e1:18:8f:27:4f:cd:9d:6d:ec:18:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:C7:99:58:12:8B:9A:65:50:62:56:D2:A7:47:3B:5D:05:B3:F5
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:8b:eb:b9:0d:a8:54:46:1b:8c:ef:c4:0b:e7:78:12:9a:
ec:23:31:11:ff:f8:b6:03:be:bb:d2:1e:a0:b1:85:ee:78:b6:
5a:37:8f:50:01:81:4c:ae:25:b0:3d:52:c9:04:ea:f0:8f:96:
28:a6:6d:07:51:c1:b9:00:0e:46:5a:31:7d:0f:cc:e2:da:0f:
91:cd:47:3e:e5:41:fb:6e:81:25:94:09:45:46:7c:26:b8:98:
60:7a:da:7a:44:c2:dd:ca:31:9f:ae:6b:cc:c4:5e:25:48:a3:
c1:cd:bc:7c:1d:75:cf:24:3f:df:62:03:93:86:0a:a1:fe:90:
8c:35:d7:c6:74:fe:31:92:c8:de:30:1a:9c:81:d0:a6:26:39:
b1:68:dc:58:e0:b9:59:c7:0e:a1:2a:77:80:3d:b5:07:27:bd:
b1:d7:b6:af:4e:eb:8c:5d:f3:33:a5:b3:4d:dd:1c:d4:9e:d0:
96:19:85:7c:6e:6f:5c:7b:11:75:c0:12:f6:75:3f:c1:99:c8:
c6:b0:d2:c0:f2:ae:3e:75:a3:66:19:47:0d:0c:84:d9:05:b7:
ff:b6:e0:f0:bb:57:02:1a:4c:68:da:a0:c3:7b:f8:f0:16:72:
b4:11:1c:dd:be:aa:9c:2c:b2:4f:6e:c7:9d:13:30:c5:a9:8d:
f1:d2:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:56:12 2025 by rpki-client