Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: G23lQW0yyDGZfKmSniOOhiDFg4glqjYwecArbFuw8vY=
Subject key identifier: C3:CF:77:17:C8:4A:53:92:3B:E7:FF:8A:F4:99:54:4F:07:18:33:7E
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 019875D2B120746EF5CCFAB9F001A9FAE728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 067B
Signing time: Mon 04 Aug 2025 16:03:18 +0000
Manifest this update: Mon 04 Aug 2025 16:03:18 +0000
Manifest next update: Tue 05 Aug 2025 16:03:18 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: 3gW+MbTEMqjl/s7oLdFr4KKner8QwCTlgJH3XtRHCT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:b1:20:74:6e:f5:cc:fa:b9:f0:01:a9:fa:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Aug 4 16:03:18 2025 GMT
Not After : Aug 5 16:03:18 2025 GMT
Subject: CN=c3cf7717c84a53923be7ff8af499544f0718337e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:6c:c0:f4:d0:8d:1a:5f:92:0a:ec:8e:5c:
c4:fe:4f:33:b3:f1:f0:01:bf:7c:7a:a1:5a:53:4a:
4c:69:49:19:04:4d:68:88:d5:6f:88:bb:5e:b6:97:
23:28:8a:8b:5a:73:be:9e:4f:70:42:b8:f4:71:de:
3e:1a:a3:af:04:f2:c7:38:4d:47:17:b5:22:7c:89:
20:ab:95:d6:65:91:56:be:ad:46:3b:c0:e2:2d:b7:
0b:2e:72:88:6d:90:73:84:a5:04:e5:73:42:ac:eb:
02:70:ae:86:0c:7a:fa:63:24:f9:f0:f2:5e:63:7d:
02:c7:15:dd:69:d1:e9:36:de:ae:1f:4b:e8:3c:10:
a8:dc:71:87:bf:39:98:ac:cb:b3:69:88:59:99:8d:
c5:cb:06:ff:9a:e8:ca:7c:be:d7:d9:86:b8:64:4f:
93:e1:98:4d:93:85:5d:fa:7e:95:da:65:73:90:fd:
8f:e8:95:c5:ec:cd:7a:42:a2:cb:bf:da:3c:02:d3:
c6:a6:78:9c:2b:a8:62:7a:2e:e9:5d:7b:2e:d5:c1:
fb:82:fd:ad:8c:d7:70:d8:bc:4a:cb:ef:a5:c1:89:
77:45:6f:9a:8d:d2:76:6c:56:ea:6b:68:0d:33:d8:
81:20:6c:02:ad:b9:88:5c:9b:c2:71:98:57:dc:06:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:77:17:C8:4A:53:92:3B:E7:FF:8A:F4:99:54:4F:07:18:33:7E
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:f8:b6:ce:d7:ec:27:d9:ec:01:15:3f:b6:8f:a2:d8:77:
f1:33:e0:99:25:80:cb:98:2b:f4:ff:86:33:ac:ba:11:08:fb:
7a:ec:33:5f:48:6f:81:36:9d:d4:1c:a8:bf:00:89:4d:ae:27:
3c:85:c1:a2:7c:6b:2d:16:a2:7a:97:b7:d2:c8:4c:b5:0a:7c:
27:d8:a2:c4:ce:fb:07:f5:89:1f:88:e6:7c:94:93:c5:2e:b1:
b5:f8:9c:17:8c:0f:3f:a8:36:13:57:df:68:8a:97:2a:df:4f:
b4:90:25:84:ee:ce:df:54:5a:8d:2a:bd:bd:6f:a8:33:53:ca:
89:81:c1:72:bd:1c:d9:f3:3f:2a:32:54:05:97:3f:ee:cd:c0:
2f:10:61:c8:a2:14:59:8e:6e:7f:ca:df:5b:5b:e2:91:97:11:
be:2c:fe:84:b1:f2:8b:66:2d:4e:6a:e4:7c:c1:66:57:8d:84:
46:b2:bd:3e:21:04:5c:47:79:88:88:b9:55:3b:da:de:ac:9a:
26:61:0f:28:29:c8:5a:1d:91:9d:0a:42:a4:27:77:21:e6:4b:
41:56:9c:e7:ce:de:b5:84:45:b3:1e:d5:e5:9d:cc:a6:c9:22:
3c:21:bb:c3:e2:05:54:79:32:81:2b:29:76:3f:a4:66:42:34:
57:db:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:25 2025 by rpki-client