Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
File: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft (raw, json)
Hash identifier: ufWrodOiJEoSAgy5T6UAkZojcU6ISU6LL6IpuXmiJdM=
Subject key identifier: 67:2C:A2:85:FA:6D:86:81:A0:B4:9F:02:39:2E:48:79:11:68:DE:45
Authority key identifier: BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD
Certificate issuer: /CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
Certificate serial: 01984A41A9D2496C3D79863881ED50A6921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
Manifest number: 02CA
Signing time: Sun 27 Jul 2025 05:01:13 +0000
Manifest this update: Sun 27 Jul 2025 05:01:13 +0000
Manifest next update: Mon 28 Jul 2025 05:01:13 +0000
Files and hashes: 1: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl (hash: Jot6SfcHqoFUkuNv0gsliHHHTPl61ReyPRI4orKqgf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a9:d2:49:6c:3d:79:86:38:81:ed:50:a6:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
Validity
Not Before: Jul 27 05:01:13 2025 GMT
Not After : Jul 28 05:01:13 2025 GMT
Subject: CN=672ca285fa6d8681a0b49f02392e48791168de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:8d:e4:6a:95:df:5c:af:6c:71:28:d4:43:
2c:21:c7:81:91:e1:21:e2:38:97:0c:67:31:2e:3c:
97:43:c1:b1:9f:63:56:db:bf:9f:54:5c:98:a1:ab:
4c:bb:12:2f:8d:c8:ff:18:b9:6a:f8:f4:bc:0a:e2:
71:4d:60:02:02:c7:c8:d2:7e:6b:8a:91:ec:f3:f4:
eb:86:0a:08:65:8d:37:70:4e:36:d4:36:75:0a:06:
ce:88:b9:c1:48:22:a2:90:e2:43:b6:d9:89:f8:1a:
96:a3:de:a0:e8:41:a5:a9:6a:95:5c:2b:91:e5:09:
8d:d6:c9:be:f9:0b:56:3f:20:4d:47:07:e3:0b:da:
3a:97:e0:2b:75:8b:44:cd:97:7a:00:a3:9c:83:de:
e4:b6:8e:82:c0:bc:a4:db:f0:24:0c:7e:56:94:f0:
b1:64:2a:2f:8a:79:d6:e3:e7:88:62:7c:bd:76:c3:
e2:58:ea:b9:7e:95:1a:a5:db:03:58:21:d8:01:48:
87:bf:9f:49:67:ae:0c:1e:eb:e5:10:66:08:63:97:
57:01:46:56:ba:24:26:74:18:a1:b0:b3:7c:99:c8:
f8:ce:92:9b:db:71:9f:3e:a2:f9:6f:b8:8a:f0:ac:
35:db:4b:8e:d2:cb:ea:2b:9b:45:ba:eb:5b:15:23:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:A2:85:FA:6D:86:81:A0:B4:9F:02:39:2E:48:79:11:68:DE:45
X509v3 Authority Key Identifier:
keyid:BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:1c:9a:60:01:5b:60:f3:09:fb:bd:f6:60:2d:f8:49:fa:
62:ed:0c:a4:24:81:11:0b:64:e7:f9:b0:92:3b:51:b9:bb:75:
84:a3:14:c3:58:90:5b:a9:5f:a3:2f:02:e3:85:68:e7:5d:a2:
ec:c6:fb:fb:3d:9f:ba:37:e2:d0:6e:3b:e5:5a:a9:85:cc:f5:
95:71:6f:46:83:56:cc:31:ec:49:ab:a5:4d:7c:98:27:3d:6d:
05:42:9b:47:22:13:ea:e5:bb:7c:13:35:39:aa:bf:79:4e:86:
c6:27:46:f7:4c:2e:bb:16:5c:88:56:2d:d0:77:76:fe:fa:e5:
0b:2d:7b:3f:88:5e:05:6c:87:03:78:4e:40:1e:ce:a1:67:93:
65:cd:aa:cf:0d:70:59:b6:85:7f:14:ed:15:e0:a4:70:21:04:
50:af:b6:24:78:3b:b9:48:f8:1b:c2:8e:71:33:0e:5a:65:aa:
d0:d1:fd:7b:70:4a:79:c9:91:f2:20:51:82:87:76:ff:0a:14:
b7:4e:e4:39:99:19:96:28:d0:29:ba:17:17:b8:46:b5:6f:f4:
0f:cf:21:20:d0:72:84:14:37:85:c3:b6:77:8d:be:df:60:48:
0b:a5:4f:84:03:0a:0d:6a:d9:c0:aa:6a:62:09:10:14:f6:e2:
2e:94:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:45:53 2025 by rpki-client