Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier: WmuoG5CETk++/9PL069YJ5AN5axZfknDLbcbtlm8YDQ=
Subject key identifier: 5D:45:74:06:32:AB:A1:5A:3D:DF:3E:39:28:E6:A0:C0:06:37:F2:9C
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial: 0199239F6722B43A400E78389FC794DA9ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:13 +0000
Manifest this update: Sun 07 Sep 2025 10:01:13 +0000
Manifest next update: Mon 08 Sep 2025 10:01:13 +0000
Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: gDn4eqgMLcUwoWH6rP4ehYWhX3A4QiBfhhqgkfdYU+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:67:22:b4:3a:40:0e:78:38:9f:c7:94:da:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Validity
Not Before: Sep 7 10:01:13 2025 GMT
Not After : Sep 8 10:01:13 2025 GMT
Subject: CN=5d45740632aba15a3ddf3e3928e6a0c00637f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:0c:d8:33:ae:39:04:20:a3:d9:b1:fd:7d:
81:9a:69:41:83:94:df:3f:b0:19:76:1b:8b:96:de:
87:29:65:74:df:f3:2f:cb:da:fe:70:fe:9e:a4:af:
47:c7:28:13:d1:37:6a:4f:a4:af:23:fb:63:7b:cb:
af:4d:1c:3a:93:0f:7e:d9:5f:cc:8a:68:47:39:0e:
0b:0e:03:80:9f:f5:4c:be:dd:1e:ec:e1:16:90:c1:
f4:e2:e6:ef:88:83:84:d7:ae:7c:f3:f7:97:94:4a:
1f:d8:2e:88:55:ae:c0:e9:a4:a8:5d:ac:ca:48:95:
c0:f1:f0:83:71:7c:fe:de:cc:bb:f6:27:8b:d9:18:
6c:e2:d8:12:cd:62:de:66:90:10:eb:88:27:61:e8:
f0:c7:3d:bd:83:51:75:d0:57:b7:87:05:8e:39:f0:
b0:71:de:11:23:16:f0:87:82:91:b2:fd:32:be:5d:
a3:32:91:92:0c:0c:2a:e5:19:33:70:26:67:53:67:
b5:a3:fe:a4:c5:d6:a2:e0:09:2f:41:01:12:47:03:
e7:cd:92:93:82:44:77:5b:24:f0:91:65:03:04:b6:
af:1a:ea:b7:ed:32:52:a2:a8:0b:9a:3c:6f:7d:dd:
5d:1e:ed:bf:c7:d0:8c:eb:04:4e:3f:1e:f5:cc:42:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:74:06:32:AB:A1:5A:3D:DF:3E:39:28:E6:A0:C0:06:37:F2:9C
X509v3 Authority Key Identifier:
keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:3a:56:bf:fa:9d:96:98:02:b1:5b:47:33:c8:9d:d3:c3:
d3:34:d1:c2:85:c8:a5:94:ad:02:93:93:51:96:83:f4:d4:98:
13:fd:28:a3:1d:d7:29:4b:2c:a8:6e:74:c4:1a:3f:8d:3e:4a:
00:20:60:98:69:c5:30:f4:0b:4a:a0:80:e6:cd:b5:43:be:3c:
cf:2f:e7:95:53:68:b8:24:c0:c7:02:dc:31:a8:ea:94:5f:89:
97:80:4c:cd:c8:9d:e3:4e:f6:64:b6:4d:74:be:fb:d0:d8:6c:
2e:78:e8:a7:24:92:9b:34:69:79:ff:b9:92:dd:c2:49:71:40:
c0:e3:ed:39:7f:f2:29:f4:36:9f:9a:1e:5d:16:0b:ab:7f:0b:
ea:cf:73:53:6f:a4:61:59:bb:89:f5:05:bf:b6:fc:eb:3a:96:
0b:01:87:2d:78:ab:d8:7c:91:8a:3e:03:40:a6:87:1b:0e:06:
3a:ea:cc:2e:8d:63:38:f2:48:79:49:60:2c:55:b4:f5:ed:40:
57:9a:66:f3:86:db:3f:d2:17:ea:cc:f3:cc:5d:f7:ae:98:c9:
f2:b4:9d:57:ba:39:78:08:0c:2f:88:7d:51:c4:ca:95:bc:e1:
0b:5d:49:45:ed:4f:5e:34:a0:9a:d9:94:0b:08:9a:ab:61:3e:
c6:e9:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:56:50 2025 by rpki-client