Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: UXwCpAxTo+56aPwvhSskB1plYSPDwcCAj8k3CqoXRtE=
Subject key identifier: B4:04:EE:6E:19:5A:AA:28:EE:31:DE:11:CE:87:F3:0E:92:57:83:11
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 0199161ACACB01A80B1035F421CBF4133BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 1063
Signing time: Thu 04 Sep 2025 19:01:18 +0000
Manifest this update: Thu 04 Sep 2025 19:01:18 +0000
Manifest next update: Fri 05 Sep 2025 19:01:18 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: VcRiUgBQVFYL7os6uYfIlFd/h5l+HRBr6va+wd8Cwhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:ca:cb:01:a8:0b:10:35:f4:21:cb:f4:13:3b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Sep 4 19:01:18 2025 GMT
Not After : Sep 5 19:01:18 2025 GMT
Subject: CN=b404ee6e195aaa28ee31de11ce87f30e92578311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:a7:e1:58:77:79:04:9b:81:bb:45:a3:ba:
45:e6:bd:7e:fa:b1:09:27:89:5a:82:fd:12:3f:ba:
d1:40:74:f5:24:68:82:0a:99:e1:0a:a9:67:3d:cb:
84:53:da:76:50:e4:72:de:47:ac:6d:08:01:cf:60:
4e:fd:dc:f5:f5:c3:2c:82:17:36:dd:3d:24:2a:b5:
8d:86:5a:78:ac:21:c3:cf:77:d8:a9:25:3f:5f:e0:
b9:dd:4e:fb:0d:cf:83:5e:c0:a6:c7:38:d3:10:e1:
07:51:e8:96:a5:41:77:ef:84:9a:3b:c6:88:39:7c:
1a:43:33:98:f5:2a:cd:62:78:c7:88:e4:94:8f:18:
08:fa:f3:ae:e6:d6:90:cc:72:bd:37:d1:26:5f:20:
18:ef:8f:fb:50:27:33:62:86:fb:74:17:e4:70:13:
34:8b:7b:8e:cc:f2:af:98:25:84:7f:d7:97:b5:ae:
39:3d:6c:d6:f6:97:c3:c6:bf:13:76:52:a3:77:b8:
bf:0e:3f:41:b6:17:3b:18:58:3d:4f:01:16:c4:1c:
2f:8c:b2:d3:cd:6f:ea:51:03:55:92:b2:0d:ab:77:
f1:8f:e3:96:6d:3b:57:e1:47:12:e3:2b:eb:b8:59:
b3:c3:bc:18:c1:14:74:bc:bf:24:fc:12:a8:95:00:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:EE:6E:19:5A:AA:28:EE:31:DE:11:CE:87:F3:0E:92:57:83:11
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c0:1d:48:f5:e1:56:dd:6d:03:b3:d8:eb:cb:8e:b3:34:bf:
9d:a3:9f:78:62:c5:34:e6:65:10:f7:a3:35:b6:04:d6:cf:c7:
82:5e:82:98:d8:0f:c7:44:01:5a:0d:42:6a:da:82:b2:13:b3:
52:aa:5f:59:3d:44:66:dd:51:ab:39:b3:32:0f:e1:85:8e:8b:
b9:54:3a:52:d3:5c:e0:af:9e:04:6a:30:ec:13:41:be:8f:b2:
0b:15:ee:ac:84:69:15:83:90:bd:dd:80:f2:35:39:70:cd:8a:
d4:cf:91:ba:c8:a3:47:fc:38:f0:15:13:b0:63:f3:01:ab:de:
8a:b8:4f:f3:b4:93:e9:73:ce:da:51:97:35:94:0b:58:19:05:
1e:6d:42:60:ec:a2:bd:4e:4b:70:d3:6b:8b:c0:ac:0e:83:37:
d5:ff:f7:6d:f3:f2:18:f6:59:e3:6b:bc:95:fe:9e:8b:b3:c7:
ac:8f:b1:9d:98:ce:23:18:8f:1b:55:28:2a:a3:8e:a4:ae:e8:
c7:3a:71:b1:14:3a:63:c7:29:c1:5e:08:05:2a:20:62:21:3b:
94:7c:4e:6f:65:b0:0b:0b:c9:03:f0:4a:f8:cc:8e:59:63:b0:
48:54:c1:e8:20:e5:91:57:e7:f7:11:dc:9d:55:fb:49:37:59:
d7:df:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:20 2025 by rpki-client