Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: VvysyVUocR8IoNhlFXguLo0zCNCpx6B4nMAHcgrIBpo=
Subject key identifier: 8C:38:1D:96:39:17:57:A6:42:90:9F:41:FB:76:64:22:15:95:F5:13
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 0198744FA5FAA31C050C1A1547295720F2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0B4C
Signing time: Mon 04 Aug 2025 09:00:33 +0000
Manifest this update: Mon 04 Aug 2025 09:00:33 +0000
Manifest next update: Tue 05 Aug 2025 09:00:33 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: XFSW+QOLYM0r5dPQulDOXgKjd/cEHuG+X0MLSzs+u44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a5:fa:a3:1c:05:0c:1a:15:47:29:57:20:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Aug 4 09:00:33 2025 GMT
Not After : Aug 5 09:00:33 2025 GMT
Subject: CN=8c381d96391757a642909f41fb7664221595f513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:3d:6e:93:44:e5:87:be:c9:c6:06:85:8d:
b4:d8:31:fe:18:0d:32:66:9a:da:69:a6:8b:a0:74:
20:75:49:a1:7c:dd:22:39:ea:e8:bc:59:12:7b:50:
46:8c:8d:28:be:c7:f5:3d:74:de:d2:fb:f8:f9:f2:
cc:1e:79:2b:a8:16:f7:ff:3c:6b:79:c1:27:c6:3e:
20:b1:eb:ab:b9:6b:33:54:a8:e7:b4:b6:95:b0:e8:
b2:45:37:10:40:a5:50:2e:a1:64:ac:8b:85:86:46:
df:43:0b:26:14:6b:7d:79:46:99:c1:d4:a1:37:6f:
0f:61:76:80:1b:3e:43:5f:03:7a:46:0b:ff:33:6d:
0e:bc:a1:54:e6:9d:80:91:bf:07:ab:ac:1e:74:79:
71:c8:6a:e3:30:a5:56:9b:5f:6c:bf:62:a3:23:15:
63:fc:81:7d:6e:b1:bd:22:0f:56:51:4a:c7:a7:5b:
c0:07:4d:0d:57:f2:92:ae:09:37:14:eb:7b:76:69:
3f:db:89:7b:fc:db:84:e2:db:81:72:e8:19:7f:df:
d4:3a:fe:3a:3d:0e:58:93:3d:7c:ee:c1:75:5c:50:
6a:d2:96:7f:bd:e9:d8:41:e2:ec:e8:6b:ba:26:4d:
07:eb:75:b8:9d:0a:14:54:fe:ae:58:51:a7:fd:6e:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:1D:96:39:17:57:A6:42:90:9F:41:FB:76:64:22:15:95:F5:13
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:8e:da:00:49:ba:75:fd:ca:4f:6f:40:59:7e:1d:1d:92:
d3:17:b9:81:b5:ec:cc:9d:c7:33:0f:8e:0d:d9:cb:5a:50:c1:
22:f1:bb:b6:cc:08:2e:38:ba:95:1c:e4:77:08:c6:6c:30:0b:
e3:b1:7e:35:d7:84:81:b7:aa:5a:c6:ce:38:d6:41:78:f3:66:
6d:71:9d:72:76:6c:92:19:d6:ae:95:6c:cb:f7:16:eb:e7:be:
69:30:8c:e1:2a:e9:95:67:36:b8:c5:6b:62:74:69:79:37:92:
bd:92:25:2b:72:8c:8a:35:fd:68:b0:63:37:69:65:b5:17:eb:
da:1b:9c:d2:80:ab:8c:71:e6:94:d9:41:d7:ce:e9:14:52:c7:
c0:50:87:68:33:80:11:be:a6:ee:93:45:54:79:d2:48:63:59:
cd:67:b7:7e:6b:f9:a9:36:fc:43:da:fd:08:38:f3:18:02:7e:
27:73:30:36:db:9a:8f:ef:d0:92:3c:0c:e8:c6:5c:2a:12:12:
9a:7d:ad:32:3f:60:08:d0:a7:c2:1f:4e:ae:62:e8:63:0a:50:
c0:2c:90:06:71:8a:00:21:1d:76:ee:ec:30:a6:a4:bc:a9:bd:
4a:85:67:d9:07:41:5a:89:48:b8:49:38:80:e1:83:31:1c:9a:
ac:5c:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:29 2025 by rpki-client