Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: +4UEADx14zfONZuVemexnKaAIwH9wplMONzk+fwFW08=
Subject key identifier: EF:26:60:C4:50:39:B3:D4:EF:FC:6D:EC:66:27:3A:EC:4E:D1:36:1F
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019873E3007E299061B80DBA9A35D0018074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0212
Signing time: Mon 04 Aug 2025 07:01:53 +0000
Manifest this update: Mon 04 Aug 2025 07:01:53 +0000
Manifest next update: Tue 05 Aug 2025 07:01:53 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: 7DzxcbUuvXHYh2vDvvzUQYJuGgazWoLf5KMRpESLP3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:00:7e:29:90:61:b8:0d:ba:9a:35:d0:01:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Aug 4 07:01:53 2025 GMT
Not After : Aug 5 07:01:53 2025 GMT
Subject: CN=ef2660c45039b3d4effc6dec66273aec4ed1361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:7d:d6:35:f4:90:da:73:f5:2c:a4:df:c4:
7b:9e:d7:03:1c:3a:d4:e8:b5:9b:9e:45:09:a4:ef:
c7:73:0c:d9:6f:f3:47:e2:83:10:d4:ca:1b:df:2d:
90:60:64:88:03:b1:1f:df:24:8e:d1:4c:3f:83:fa:
6c:88:ed:b8:9e:7b:9b:16:0d:48:25:11:d4:38:d9:
36:b9:77:71:ed:eb:bc:0e:36:0d:bd:ae:7f:66:f6:
9b:b7:60:e0:ba:bc:8c:48:0e:be:5e:f7:6c:37:78:
5f:52:a8:a6:1b:a4:8c:2d:92:61:09:44:5d:eb:c0:
01:28:4e:a0:8d:2f:48:5b:78:1c:87:a1:53:5e:70:
68:64:dd:4e:88:f3:97:88:b3:c8:5d:f4:e3:b0:c6:
0c:f1:44:5e:ef:a6:2a:1b:09:62:c7:af:ea:72:66:
5a:36:3d:7b:b6:78:96:de:6e:2e:e2:9a:79:cf:00:
11:47:9c:91:38:54:e9:d8:5f:f5:10:fb:ad:67:ef:
b6:79:92:46:f7:a2:6e:ef:5b:6f:3b:5f:8f:99:c6:
90:98:79:3f:59:7b:22:ec:cc:e1:6c:3d:db:0f:ca:
99:7d:48:d1:04:49:fe:67:74:47:50:96:36:2d:6c:
15:2c:fe:fe:50:2a:f2:72:b9:72:67:d4:0b:c8:65:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:60:C4:50:39:B3:D4:EF:FC:6D:EC:66:27:3A:EC:4E:D1:36:1F
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e1:32:72:6f:f9:8f:e1:e3:4b:c3:75:bd:5e:92:f1:3a:ad:
de:10:62:d7:cf:c4:6d:e2:4b:28:9d:7e:f1:79:b6:04:1d:09:
96:45:53:f6:4c:99:09:35:95:ed:10:c5:0d:2e:08:82:67:35:
6b:62:be:7e:ec:99:e2:fd:21:76:52:8a:30:5f:93:21:0a:4d:
bb:4a:da:6e:22:e3:7b:9d:a7:ea:43:f5:42:0d:5f:a9:60:97:
24:c1:87:0b:a4:e4:12:9e:f4:b2:c4:6f:e6:02:8e:e3:89:01:
61:00:9b:42:a8:2a:5c:fb:c0:1b:46:f0:dd:74:49:3b:f4:08:
b7:9a:b4:0d:92:ba:18:35:e9:4b:33:ca:55:6f:d4:56:51:dc:
1a:3d:53:36:ca:a6:9a:ea:56:8f:c0:a5:b3:cb:10:0e:05:88:
71:86:d8:a9:ad:98:21:cc:86:03:e4:64:c2:a5:57:75:55:39:
29:97:a6:35:15:83:b0:a1:3b:43:d1:7c:f7:6d:69:8a:77:a6:
7a:ee:f3:3c:29:02:42:7c:4d:79:49:61:26:8b:3c:53:8b:88:
18:60:4d:84:a9:9d:4d:15:c1:2e:24:1c:a2:7e:41:1d:db:fe:
ac:5c:07:0b:11:77:97:ec:87:c2:bf:77:75:23:29:eb:75:12:
29:e4:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:31 2025 by rpki-client