Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: BECsz7gB1Lek91WACqkK8GwhJ0IkvcJcuJ8E0FM1A1E=
Subject key identifier: 72:D5:32:02:D8:27:8B:AD:D2:4A:9B:A5:91:68:34:6B:03:10:40:9C
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 0198A04CD92567D03F33FFDD45DB9873B1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 0717
Signing time: Tue 12 Aug 2025 22:00:47 +0000
Manifest this update: Tue 12 Aug 2025 22:00:47 +0000
Manifest next update: Wed 13 Aug 2025 22:00:47 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: IFgJrhOSn9nCcLpygLeYAZb8cfBxzbjB1/qjY6L/nCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:d9:25:67:d0:3f:33:ff:dd:45:db:98:73:b1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Aug 12 22:00:47 2025 GMT
Not After : Aug 13 22:00:47 2025 GMT
Subject: CN=72d53202d8278badd24a9ba59168346b0310409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:4f:df:0d:49:96:60:00:fb:a8:34:0b:c7:
0d:a8:90:22:9e:e4:61:70:c1:de:a6:94:9d:2e:93:
a6:44:9f:0d:92:be:50:54:8b:24:e6:34:1a:14:70:
83:b8:aa:8d:ba:84:c5:3e:1e:88:f7:4f:95:2d:26:
03:eb:1e:c0:ef:82:e5:ba:51:9b:63:8e:9b:e1:ac:
5d:5b:76:3c:6d:42:32:b0:49:90:b0:d3:09:c9:ef:
3c:d2:63:74:fd:6d:db:9d:62:69:fb:7d:41:ef:cf:
73:86:e9:32:60:bb:6c:2f:b8:48:94:92:34:cf:24:
75:23:b5:93:93:d8:5c:44:ee:6f:81:6e:7a:9e:e3:
39:62:98:0b:48:04:6a:86:97:83:07:57:fa:d5:d7:
25:c1:3f:93:11:9b:8d:d4:bb:b1:9b:60:72:f0:4e:
68:36:8b:47:36:13:65:2f:74:d5:85:9d:80:7f:5e:
b8:a7:4c:a0:37:80:2b:0d:c8:24:bc:44:ce:c8:f3:
6a:fd:be:8e:5b:63:89:1d:73:c6:0b:6c:94:8d:ae:
2b:e2:cc:5b:26:cc:9e:98:58:9b:59:e0:51:00:b3:
01:d8:d1:fa:0e:55:4b:de:17:b5:fd:db:c7:05:b5:
0e:02:8f:92:d5:c6:6e:ee:ff:7e:66:74:b5:5f:25:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:32:02:D8:27:8B:AD:D2:4A:9B:A5:91:68:34:6B:03:10:40:9C
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:34:c9:c1:05:15:42:01:4f:5d:dc:06:0d:d2:66:b6:86:
51:c6:6a:ae:23:70:13:6f:e7:e8:d3:6a:1e:f3:d8:84:64:bd:
02:6f:cb:b6:39:cb:3f:31:51:17:4b:c9:c8:20:0f:ab:aa:24:
98:25:ab:5e:80:c4:42:fb:27:a8:d4:0d:ea:3a:b1:ae:98:b4:
36:e5:c9:d3:e8:23:77:1b:b9:f8:3a:75:8b:0c:2a:dd:85:de:
98:db:ca:68:76:af:21:c5:a6:bf:5d:96:c9:ca:62:87:53:fd:
24:e8:8d:ea:b8:32:63:36:bc:5a:f2:98:21:d6:fb:45:e8:3a:
85:2e:55:5e:66:04:90:50:e0:1c:dd:bd:dc:9d:51:4b:fa:a4:
fd:c4:0e:5c:ea:60:49:27:8d:11:ea:6c:bc:ac:de:d2:b7:8e:
5a:75:e0:7f:48:9a:d6:cf:77:52:13:c4:fb:01:5a:13:5c:3a:
ac:a4:a4:c3:00:c5:e2:11:e3:45:98:c2:3d:57:5a:3f:63:46:
88:86:fc:f6:fa:c8:1c:98:73:e9:57:51:7b:a4:cd:bc:3a:bf:
6d:1c:66:28:99:d3:0e:b6:c6:20:b4:34:9e:a4:f1:07:34:08:
83:47:ff:04:ac:d3:1b:97:eb:cb:fc:84:52:c6:ba:ad:7c:5c:
0e:d1:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:45 2025 by rpki-client