Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: /UZd5GF9UdcfeRpsgm1bfGm4hvFYnAa23cx0AqfV+68=
Subject key identifier: 86:2D:E3:5A:A8:DE:80:D9:B9:65:0B:77:D7:36:1A:D5:2A:F6:DB:2A
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 0199221E57EDD755F6E30C77C81652EC4494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 08E1
Signing time: Sun 07 Sep 2025 03:00:37 +0000
Manifest this update: Sun 07 Sep 2025 03:00:37 +0000
Manifest next update: Mon 08 Sep 2025 03:00:37 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: Ld7yiEC8TqX0HPffekJgSN6ywacff/YHhp9FEWQEvx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:57:ed:d7:55:f6:e3:0c:77:c8:16:52:ec:44:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Sep 7 03:00:37 2025 GMT
Not After : Sep 8 03:00:37 2025 GMT
Subject: CN=862de35aa8de80d9b9650b77d7361ad52af6db2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:a6:ef:6c:0e:61:16:9a:d8:fe:cc:85:cd:
3c:f0:68:55:49:2b:cc:88:94:60:60:96:1d:20:84:
95:0f:17:d6:11:79:fc:15:91:c4:e1:9a:64:87:10:
22:ad:2a:19:31:d7:c0:a5:ce:72:25:c8:ce:8c:94:
2b:ee:b3:3b:d1:b6:c6:93:5d:6c:34:9d:13:f5:ce:
04:0f:39:a3:22:03:a2:32:3e:e4:13:e8:df:8e:95:
86:fe:26:87:8b:f5:5e:ce:58:62:0d:8e:ff:7d:0e:
27:69:dd:d5:29:f4:b8:7f:f7:1b:1c:bd:e1:18:9a:
e1:14:6b:a6:17:c1:98:8a:39:2a:ff:fc:99:88:38:
50:c5:c0:86:69:62:2d:24:3d:cc:af:64:94:39:c5:
db:69:bb:df:b8:95:72:bf:65:de:1d:d6:67:85:13:
59:30:10:93:ec:73:39:60:37:a0:dc:cb:dd:51:09:
6c:a2:cc:6c:5a:be:57:ca:7f:a1:ce:2a:4d:03:30:
a0:25:38:c9:82:39:77:1e:37:84:bf:d1:aa:17:de:
46:d7:a3:55:5e:fb:80:83:7f:ab:ca:f2:93:58:e5:
f7:ab:e9:c2:3c:58:7d:fd:9f:fc:21:69:79:6b:22:
4b:51:65:d4:da:4b:54:17:24:67:76:7d:71:d0:23:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:E3:5A:A8:DE:80:D9:B9:65:0B:77:D7:36:1A:D5:2A:F6:DB:2A
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a3:4b:2d:e4:ae:49:88:e6:10:fa:07:80:04:89:f1:10:f8:
7b:56:0d:3b:45:17:12:03:37:57:3a:8c:0e:e6:57:d7:08:be:
f5:60:17:2a:4b:fb:63:c6:3b:b8:81:8b:1a:d5:1d:3e:0e:71:
5c:2d:e1:00:b2:4d:28:62:7b:d2:11:9f:a7:77:01:8c:04:68:
3f:6c:fe:a7:c5:45:d5:61:d8:79:bd:20:7d:69:6b:61:fd:db:
14:53:b4:d5:13:10:3a:54:b9:63:10:92:dd:2d:1b:1c:26:e8:
50:27:44:84:87:37:84:27:64:95:2b:50:8e:91:f9:5e:b4:93:
e6:95:5f:76:e1:0b:9e:70:9f:f7:32:c5:a6:41:72:ef:7e:49:
b1:8f:6e:64:ed:6d:e9:99:48:1f:e7:85:ef:b1:27:ac:da:e7:
2c:6b:b1:81:fb:06:6c:4e:27:90:44:4c:56:a1:88:a9:7a:bb:
3d:4b:72:63:0c:c7:d0:0a:af:2b:75:09:0a:99:4f:ba:5f:87:
de:c2:bc:ad:7d:fc:73:aa:0c:7c:ac:62:de:a2:4c:bf:5e:f8:
8d:dd:5a:43:80:24:e1:62:fe:04:a7:3f:19:fd:00:f3:0d:e0:
46:6e:31:ff:0c:32:ad:62:94:bf:e9:18:eb:51:1e:8f:36:43:
4c:ac:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:27 2025 by rpki-client