Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: DXyrZpdLjLbG/hsKFh5+dDR2yHRZM/98jZAaRs1pV+M=
Subject key identifier: 52:FF:E9:FB:05:49:5B:AD:C5:91:0B:BF:48:72:97:0C:B6:A5:20:22
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 01974A7AE80D2F521ECEA2A11005855E5085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 0F75
Signing time: Sat 07 Jun 2025 13:00:58 +0000
Manifest this update: Sat 07 Jun 2025 13:00:58 +0000
Manifest next update: Sun 08 Jun 2025 13:00:58 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: 4QL5hAS6m2MPF53h7/k9nnhwo0pygLRQppBsWr6rsow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e8:0d:2f:52:1e:ce:a2:a1:10:05:85:5e:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Jun 7 13:00:58 2025 GMT
Not After : Jun 8 13:00:58 2025 GMT
Subject: CN=52ffe9fb05495badc5910bbf4872970cb6a52022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:7e:80:72:eb:b7:b5:1c:78:c1:58:c7:f7:
b0:57:f2:7e:f2:5c:2f:27:a2:5c:dc:3b:48:b2:1d:
75:c1:da:56:95:02:56:0b:fe:b5:3c:10:2f:69:ea:
b7:4b:52:e7:9c:d3:8d:9d:ad:0a:86:73:68:59:42:
3c:e6:73:61:b0:d6:60:92:90:be:a2:72:ab:cd:ac:
e9:ee:c1:b1:d6:fd:07:2d:c7:b4:08:4c:00:80:b7:
3c:37:1d:43:81:de:2e:27:44:b0:6c:86:dd:ac:2c:
43:db:19:7c:5d:b4:4c:56:3e:e6:de:5d:65:e9:d8:
9d:b9:2b:d8:6e:d7:c8:ef:aa:d1:fc:f5:13:31:c5:
74:e9:75:eb:32:ab:7f:95:bf:a4:82:7b:38:5d:bd:
f4:cc:0d:82:46:06:9d:84:de:ee:af:fe:17:a2:91:
81:23:bc:d5:cb:80:b5:81:54:c5:b4:06:ee:e9:8d:
51:43:a8:0e:56:0a:e9:16:03:d2:6b:2d:8d:a0:9d:
c1:38:f3:ce:be:c3:68:c1:9b:5a:7a:8e:c6:f1:a2:
ff:27:37:ad:a3:40:5d:c4:01:f0:c3:95:96:98:c0:
81:e9:a9:33:81:c9:b7:33:fa:fd:07:f3:63:8f:4f:
92:b1:b8:27:d4:a8:18:0f:fb:9d:7a:7c:38:4f:45:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FF:E9:FB:05:49:5B:AD:C5:91:0B:BF:48:72:97:0C:B6:A5:20:22
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0a:2b:d3:c8:3d:8a:14:31:0a:09:26:85:1f:7f:df:21:2f:
e7:d8:e3:a3:22:58:69:de:0a:ba:f3:99:53:78:14:98:fe:70:
23:43:3e:2e:26:8d:6e:60:9b:ac:5e:39:85:79:f2:b9:e6:ef:
c3:c8:59:6c:4f:db:1f:21:9e:31:74:20:4f:c5:80:97:e8:88:
05:08:0a:e4:2c:12:fe:c4:98:6c:5a:cf:ee:de:72:37:69:46:
3c:3b:49:1e:1d:77:fa:3c:d7:62:f1:fa:f1:5e:9d:5d:9e:45:
f0:b6:4b:64:ff:14:53:aa:64:2a:48:4f:7e:ea:6b:74:3e:ea:
52:da:d2:5f:f7:49:89:10:37:48:ce:3c:75:2a:20:7d:e7:32:
06:ea:40:f7:cb:5f:53:58:36:da:e3:5e:bd:fd:eb:a5:e7:38:
53:42:df:f0:d3:6c:fe:af:0d:de:81:0c:cd:5b:d1:e2:6e:b3:
c3:b3:0f:7f:c5:62:9e:fc:d8:96:23:57:89:3e:e8:a9:ac:8e:
08:d2:72:ae:1e:70:5e:c9:6d:4e:2d:5c:a6:75:a0:52:32:02:
7b:0b:e4:3b:36:8b:13:92:e9:79:75:03:cd:51:5f:55:0f:8a:
de:f4:f9:85:95:14:2e:5f:e6:42:6a:b6:5e:de:66:d2:8b:8f:
9e:47:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:46 2025 by rpki-client