Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: ZRTABFRuYjZIV1X03ez/mjWl92tKGmqRBUgKfh2StOU=
Subject key identifier: EA:70:D8:73:09:10:06:F7:62:29:E3:C7:B6:35:EA:D9:22:0C:D9:7F
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019922C339063BC660002B6E851D49340143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 042E
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: yJNZbAj0lY84un1WPSgLASMGAAXIpICLAManVWIrc7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:39:06:3b:c6:60:00:2b:6e:85:1d:49:34:01:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=ea70d873091006f76229e3c7b635ead9220cd97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:64:2c:af:72:39:61:64:fd:71:20:48:c0:
42:ae:16:2d:7a:23:11:c2:db:e3:24:95:5b:0b:f8:
10:26:91:21:34:48:98:46:35:e8:07:ad:2a:e3:ff:
cf:cb:1f:9e:96:9e:b8:40:3d:b2:39:3c:2b:e1:95:
41:82:73:da:75:6e:dd:ed:eb:8b:5e:84:8b:e6:96:
f0:a5:19:11:6c:29:f3:4f:5a:ce:26:f7:98:3c:51:
1e:76:c7:36:02:55:a5:17:48:99:e4:aa:51:3e:dd:
2a:e9:dd:13:56:27:2d:ae:4c:57:bd:c6:a1:99:af:
f5:37:7c:12:de:aa:b8:d0:65:d3:c3:0a:30:54:40:
a9:82:f3:7f:b6:90:64:84:58:b5:03:c8:b2:ec:32:
a0:cc:53:06:41:00:ea:f4:cc:9c:50:80:b3:55:05:
9b:d6:70:ae:52:1e:d0:3a:9d:e7:13:57:2d:0e:e0:
96:d0:e8:4a:b6:fa:80:b8:79:b2:ee:cd:b2:b6:2c:
2f:90:e8:c0:ff:80:ab:1b:27:3c:d9:08:55:82:bf:
12:9f:36:78:7e:9d:fc:9e:aa:d1:b0:9c:09:38:63:
61:b1:70:eb:28:59:af:39:3e:bc:10:94:a3:db:ed:
69:a7:45:c1:0e:ef:80:06:9a:e6:d5:e2:26:bf:b1:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:D8:73:09:10:06:F7:62:29:E3:C7:B6:35:EA:D9:22:0C:D9:7F
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c9:3a:00:f2:6e:79:80:a5:2b:0d:c9:1d:48:e2:73:12:e7:
78:75:1a:0c:70:1f:e6:3c:cf:f1:23:fa:32:c3:94:b5:70:71:
5b:c8:64:8f:55:50:5d:2b:a3:93:88:05:d8:d4:14:b9:ce:bb:
65:bd:fd:8f:1c:92:f6:b0:8b:da:1c:e1:92:13:8f:8f:49:bc:
54:cf:5d:dd:fe:4c:42:a8:ba:13:7e:93:02:01:f0:de:f2:b4:
60:34:12:54:ae:7e:68:3a:5e:e0:be:09:11:69:1f:7f:33:e6:
c3:88:0d:7c:8c:33:c7:e2:76:34:6d:2f:61:02:61:1f:88:e7:
d4:af:f6:0c:43:e8:fb:e6:0e:ed:0d:80:fc:a6:6f:08:8d:e6:
85:5f:30:d9:89:15:77:28:d9:da:8b:17:d7:48:e9:b6:33:87:
4d:5c:08:5b:d8:fd:89:12:88:f6:b0:67:43:2c:37:a5:f6:bc:
2b:91:17:ea:ed:ea:3a:f2:19:79:6c:b6:51:f9:49:92:7e:db:
32:a5:b7:15:14:c8:da:ad:0e:c5:d9:d9:bb:7c:3f:b6:25:40:
df:b8:72:f7:8c:3d:68:11:9e:ce:36:c3:52:29:f7:7c:18:be:
5c:02:76:b2:17:3b:0a:64:fc:b3:ee:20:84:01:cb:5f:56:33:
dd:72:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client