Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: rrgg4R38LXQGWRY2XpJcqY+P4NFFa9QdlT6owtspb6k=
Subject key identifier: 3E:93:5F:AD:29:D0:E3:8A:8F:BA:54:A8:D7:61:7D:C0:11:C6:76:8E
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 019921E74D66AEAB861B687E617C5F9D0F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 0493
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: Wok+Z6JdCcGT/3xvKVymm5XCZmpLcQT02SvWfT5y3ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4d:66:ae:ab:86:1b:68:7e:61:7c:5f:9d:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=3e935fad29d0e38a8fba54a8d7617dc011c6768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:4c:d3:15:ce:6e:fe:93:52:44:8d:97:de:
c2:e5:aa:67:6a:4e:34:88:14:79:fd:71:53:26:ce:
5a:fc:1f:07:75:19:cf:81:ad:94:1e:f3:f4:3e:8d:
c4:23:64:fe:aa:a2:42:f9:5e:3d:1d:ff:79:ba:fb:
c3:05:68:1e:01:1d:b0:d7:fc:7d:1f:57:ae:d2:23:
05:c1:12:fe:86:1f:c2:a2:5c:7f:55:c6:bf:23:ea:
8e:32:0f:33:6d:9c:18:a0:b9:bc:d4:da:4a:3b:8f:
01:e0:f7:7d:71:f7:e5:54:d1:df:4c:f3:91:43:ef:
c7:0f:8b:f9:d2:68:5f:4e:6b:52:37:fe:75:74:0d:
41:ba:2f:68:29:48:84:3e:87:db:6e:ce:f7:2f:7f:
d0:b7:15:ee:72:64:16:7b:4c:de:c8:0a:5b:9f:33:
54:d1:85:29:20:c5:0d:c1:10:67:3c:57:9a:15:13:
5b:9a:88:ba:da:72:a8:ae:51:d0:ad:df:5f:22:b7:
f9:27:38:09:c7:2b:ce:c3:20:2e:0b:5c:65:93:02:
25:51:51:fa:34:84:27:10:59:13:3b:47:3f:ef:5d:
01:58:98:25:59:35:8d:5d:b5:5d:81:bb:f7:98:05:
4f:7d:25:b9:94:8e:14:31:16:13:26:46:27:cc:c1:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:5F:AD:29:D0:E3:8A:8F:BA:54:A8:D7:61:7D:C0:11:C6:76:8E
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9f:97:f9:96:9c:fe:c9:f0:df:6c:7a:b1:4e:53:61:0e:77:
f3:b6:ad:0b:3f:d2:4a:6a:de:59:8e:29:0c:4b:c6:00:ce:47:
b0:91:a9:0c:c2:0c:1e:fd:38:33:fc:f5:e3:e7:d7:71:a7:e3:
09:98:f8:6e:3b:06:cb:0d:34:d9:5b:cc:ca:13:9a:96:52:cf:
23:82:66:28:03:54:07:48:e2:cd:49:61:64:61:57:1f:27:2d:
93:bd:f8:3b:1e:4b:b2:09:c8:56:8d:4e:7e:3a:28:85:2e:a1:
77:bd:a8:c5:8f:2b:a7:da:bb:98:bf:bf:59:ea:07:ef:f1:ff:
da:a8:c0:84:06:9a:91:ee:86:0b:a5:ce:71:ce:58:bc:36:54:
c0:9c:8e:8d:54:8a:77:b4:b6:6e:d5:11:ff:d9:87:45:09:36:
ec:33:00:28:f4:32:0a:89:28:a1:90:20:b6:41:ac:99:fa:0d:
65:05:17:8c:9d:16:2d:16:ad:3e:b9:c9:ee:a5:9c:8d:c0:44:
ef:1b:e9:2f:f1:d3:b7:18:86:9d:19:3f:68:a1:43:1d:9a:58:
fb:e6:29:db:3f:18:4a:a0:3c:39:b0:a4:2c:eb:d2:31:14:98:
43:57:71:4a:ec:61:6b:01:f7:3f:07:38:50:f1:5b:03:8d:d5:
5f:87:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:00 2025 by rpki-client