
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: JKS9vnNXydzpi4jXDgA8p1VNKx+5Zo6NT8IB/wWoXBY=
Subject key identifier: 21:0C:15:51:FC:9D:BC:EA:9D:74:BB:38:D0:8D:CD:34:10:A1:9C:DB
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 01988544F9793BD753888632D70084E5209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 02F9
Signing time: Thu 07 Aug 2025 16:02:26 +0000
Manifest this update: Thu 07 Aug 2025 16:02:26 +0000
Manifest next update: Fri 08 Aug 2025 16:02:26 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: UD6f0hXTI9rHkGBmPYTYt4tIV6BvGAtpNuPIRJfdQ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:f9:79:3b:d7:53:88:86:32:d7:00:84:e5:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Aug 7 16:02:26 2025 GMT
Not After : Aug 8 16:02:26 2025 GMT
Subject: CN=210c1551fc9dbcea9d74bb38d08dcd3410a19cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:06:10:66:3f:8f:79:00:52:02:30:e5:3d:
4e:5f:fc:11:6e:17:ab:3f:93:fb:47:b1:2a:15:37:
2a:1f:fa:1f:dc:63:2e:89:f6:05:ff:0d:3c:1f:ac:
d9:55:08:7c:db:1f:c7:50:7f:6d:9c:a6:ae:6c:30:
ee:21:d0:95:ae:a8:1c:ce:9e:e9:2b:b9:83:f5:64:
ae:e6:16:31:ae:c4:10:32:19:1e:7d:6a:0d:bc:03:
a8:dc:95:2f:c5:67:5e:7c:c9:77:24:dc:55:83:51:
ca:d4:f9:f9:bd:4e:8f:8a:fc:a8:e3:a3:19:c6:f1:
f8:10:f2:40:6f:c0:2d:dc:4c:df:39:78:79:a3:a1:
77:9c:f6:2a:f4:10:66:46:67:04:ca:c0:4f:f3:26:
b7:a5:c6:38:cc:87:ec:38:99:71:91:3c:af:95:3f:
79:cc:c6:51:f9:76:0e:3c:79:4c:bf:80:71:5e:24:
11:61:16:be:73:65:5b:5a:be:1d:ec:b4:98:40:f7:
6e:e2:c5:7a:68:fd:5e:21:47:51:41:ca:5f:bc:1d:
9b:6e:58:aa:12:22:78:18:f2:02:22:22:ce:f0:80:
80:72:31:43:e3:62:02:9a:50:61:39:73:bb:41:2d:
65:99:c4:4e:e6:41:53:1a:cf:b1:e4:16:62:56:66:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:15:51:FC:9D:BC:EA:9D:74:BB:38:D0:8D:CD:34:10:A1:9C:DB
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8f:b7:84:e6:d9:f5:d3:5a:c5:f8:54:a6:b5:8c:26:d4:32:
0d:fe:20:4f:e1:44:b4:a8:8c:89:f1:f4:d6:b0:ed:4b:03:69:
a8:a9:f8:2d:97:25:c7:16:f5:f6:cb:cf:54:58:f4:8f:51:06:
a7:42:af:78:32:ad:90:9a:8a:7e:46:0e:af:28:25:d7:d6:d0:
74:0c:a2:ee:68:8e:62:8f:1e:c0:80:4f:a5:7b:7e:c6:cb:38:
db:32:1a:aa:f0:32:a5:ff:d7:60:80:12:aa:8b:ab:e9:a2:d1:
22:82:a9:f3:bc:e4:fa:64:dc:35:b9:6d:79:c2:09:e8:e3:f1:
56:19:b4:e6:1e:32:2d:e5:15:94:28:67:c8:e2:ee:df:27:07:
85:46:54:7e:f0:00:27:75:dc:bb:9d:0b:47:ec:f8:3e:4b:9c:
04:a4:fd:5e:59:8f:a0:24:b2:e2:24:80:ed:7f:37:52:69:2c:
29:0b:72:5b:9a:d6:92:8a:2d:e8:83:24:04:6e:61:37:db:b8:
3b:94:42:8e:7a:ee:38:5c:14:c1:18:29:79:35:d9:4a:b5:68:
f1:ab:79:12:8b:65:31:04:23:46:e3:54:e8:a5:b1:c4:70:75:
0a:16:c9:fc:77:09:c1:5c:e1:cb:61:de:28:a0:ed:93:83:e5:
66:ff:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:54 2025 by rpki-client