Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier: 2wF1zvl3xEIFl6IqFliU54ut7/WgRLJYPLSNf6SbddM=
Subject key identifier: 3A:97:F1:4C:8B:84:80:F2:2E:40:A6:4F:73:27:A5:AD:16:EA:94:A7
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial: 01988F2218CEAB6C6E3CD84041818469FFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number: 0EA8
Signing time: Sat 09 Aug 2025 14:00:33 +0000
Manifest this update: Sat 09 Aug 2025 14:00:33 +0000
Manifest next update: Sun 10 Aug 2025 14:00:33 +0000
Files and hashes: 1: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: ObyzsIydU2XciP3hfJSgi1u5iIJPfAWQ81gLd2DdIL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:18:ce:ab:6c:6e:3c:d8:40:41:81:84:69:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Validity
Not Before: Aug 9 14:00:33 2025 GMT
Not After : Aug 10 14:00:33 2025 GMT
Subject: CN=3a97f14c8b8480f22e40a64f7327a5ad16ea94a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:3a:ea:62:ae:aa:48:d2:93:7a:be:27:aa:
d5:6f:cd:de:59:ae:6f:4b:17:f7:2f:3d:f7:61:b0:
cc:f0:b0:09:61:9c:6b:2c:c0:3c:df:5e:ce:d6:6e:
0f:77:27:91:ad:54:c8:fd:57:51:48:a2:1f:17:0c:
a1:0d:bd:43:76:db:c2:0c:6b:b0:09:fb:7e:45:e2:
47:37:39:e4:3f:55:35:76:87:b7:93:20:b6:e9:01:
e3:10:57:70:e4:4d:d9:4b:1a:ea:21:5d:fc:a0:f4:
49:55:e5:9b:db:93:d1:83:5a:ac:22:cd:be:68:34:
83:cc:f8:5b:a2:05:88:65:f4:7b:1e:25:da:2e:a6:
66:89:ec:f8:d6:cd:34:77:65:9a:b9:c2:36:d1:e7:
0a:a6:e4:1f:68:9f:d4:61:d3:2c:45:18:72:ef:00:
04:d2:58:27:30:3b:fc:0e:60:6a:39:35:42:76:4c:
9a:7e:2b:ac:0e:d7:d7:7b:ea:8d:6d:b8:40:3d:99:
d9:a2:ba:07:ff:36:fe:3c:9a:36:29:77:a9:84:e5:
10:b5:8a:db:28:3b:91:b2:03:66:80:c6:03:bb:58:
c0:9b:b1:6e:a5:fb:26:35:bc:61:22:92:b7:f4:1a:
11:71:b9:8c:5b:57:63:8b:94:c8:05:9c:eb:f4:e2:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:F1:4C:8B:84:80:F2:2E:40:A6:4F:73:27:A5:AD:16:EA:94:A7
X509v3 Authority Key Identifier:
keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b8:5b:ec:4f:ab:d7:18:52:43:cb:ee:9e:4b:85:47:e1:e7:
cb:34:49:ee:b2:35:c2:10:07:44:0f:85:b4:79:c9:0d:d0:01:
27:99:fa:9d:ac:08:bd:29:57:28:15:00:80:8c:e0:6a:9f:99:
bf:5e:ab:4e:da:02:d6:a5:89:e7:27:6c:d5:fa:1a:b2:14:41:
98:86:f6:c0:4f:17:2d:e9:71:64:5c:8e:f7:6f:51:9d:88:f8:
26:6f:7d:24:84:a1:8a:29:48:93:b7:1f:e7:ac:c9:5f:c8:77:
d3:e4:be:b8:49:3f:ad:91:25:63:02:18:09:ce:1b:9d:c8:c1:
56:46:7c:fb:32:d4:93:4d:52:00:60:73:45:22:96:fb:a3:43:
f8:db:3f:40:3c:0e:8d:21:66:f6:9d:58:52:97:d3:f4:ff:49:
6f:8a:d1:6e:b4:8b:57:81:06:1d:46:5d:fb:52:45:af:49:b3:
8c:fa:fd:40:36:0d:cc:6b:a9:e5:7d:00:ed:3e:2d:93:95:e8:
9c:21:f5:c9:9c:1e:3b:2e:19:f5:bd:70:cb:17:78:e3:b2:8b:
01:1f:61:b0:e3:bb:a2:b0:16:98:d8:91:fa:c2:2f:2f:50:fb:
e8:6a:82:9a:c2:8f:3a:0a:45:ec:5c:37:43:0a:d5:21:4f:b4:
99:bf:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:08 2025 by rpki-client