
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: HAd1GQARdwMs6Kxplc/3c7qVG6KGlpICBOlk2ptA5Ac=
Subject key identifier: 97:71:C0:69:22:88:79:65:7B:04:98:23:D6:DF:5B:A3:36:54:5A:89
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 01988B7D2BD316E741FC963145096D732230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 0893
Signing time: Fri 08 Aug 2025 21:01:32 +0000
Manifest this update: Fri 08 Aug 2025 21:01:32 +0000
Manifest next update: Sat 09 Aug 2025 21:01:32 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: k5cUWfEeoJEUlsRLUYJjGcLIuLiVrRbH+bnus5EM/So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:2b:d3:16:e7:41:fc:96:31:45:09:6d:73:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Aug 8 21:01:32 2025 GMT
Not After : Aug 9 21:01:32 2025 GMT
Subject: CN=9771c069228879657b049823d6df5ba336545a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:71:08:28:f7:15:5e:13:a6:ec:c3:a4:90:
00:39:e5:bf:74:ef:cb:3a:3e:4a:bd:13:c3:9c:9f:
5d:8e:78:73:cf:b2:82:34:46:25:3e:54:e8:d2:d2:
a4:c3:9c:00:d8:f4:72:0e:2b:c8:cb:4d:9a:d8:6f:
09:78:0e:f3:e1:0b:1e:e1:48:60:6c:39:df:91:f5:
44:08:e8:5d:94:40:bb:78:91:19:14:0c:39:cf:40:
b5:13:97:4d:dc:ef:49:16:07:d7:4c:38:b6:8d:64:
c8:a1:da:59:76:4e:75:17:3f:13:9d:27:a3:6f:c9:
5e:8a:18:08:d8:e3:db:c5:1e:a8:00:69:88:d1:07:
a4:05:01:a5:5e:b4:c9:f6:d3:d0:62:aa:36:8d:9b:
8e:86:9e:41:14:db:9e:ef:f0:85:d0:f3:ad:2e:98:
f1:e5:1c:0a:3b:23:f0:2b:43:cc:0d:92:41:d4:eb:
37:12:9c:9c:c0:79:bb:c4:fb:77:8b:71:a2:f8:53:
28:91:4e:2f:d0:27:38:92:a6:ba:72:85:e2:0d:e6:
65:27:80:3e:06:71:02:60:7f:46:c2:38:c8:22:52:
d8:75:b5:14:60:f7:b9:e9:09:0f:31:38:22:91:6b:
41:42:1b:2a:77:2a:67:cf:7c:7d:c1:68:17:86:be:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:C0:69:22:88:79:65:7B:04:98:23:D6:DF:5B:A3:36:54:5A:89
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:48:af:15:67:22:ed:46:b1:d7:1b:88:80:06:7d:1f:8f:
46:3b:c0:f8:c5:48:de:45:70:49:81:e5:f6:53:0f:c8:9c:ee:
fa:bc:2d:a6:9a:bf:a1:a6:97:51:af:00:2d:41:74:9e:9a:55:
90:bf:cb:59:f0:66:7c:e3:f5:0d:b0:79:a7:40:83:3f:6a:8d:
23:a0:6b:39:56:4a:1c:ac:1f:b2:55:f1:fc:4d:84:00:61:2c:
e2:14:01:72:07:24:e8:0e:5b:eb:f0:10:be:8e:74:77:1f:34:
99:ec:3c:6e:b5:ab:9c:ea:44:cb:00:e4:86:f1:54:7c:c5:25:
8a:dc:ae:09:35:6f:11:5c:41:2f:00:44:b6:e8:3d:4b:2d:f7:
c1:a0:d0:89:36:7d:74:df:21:91:d0:40:aa:4e:77:fe:2d:1e:
ca:e0:1c:b9:f9:f1:6a:21:bf:80:d9:90:34:40:29:e0:83:86:
34:01:7b:c8:ec:30:34:82:7e:6d:f3:b0:d7:ee:21:19:4f:dc:
64:4d:83:03:40:3b:54:80:ac:9c:b1:84:4e:12:94:c7:ec:cc:
22:f3:2c:70:ee:ec:e4:48:73:19:ff:51:0f:d5:fc:22:c2:83:
d8:b7:84:df:05:b3:82:70:bf:88:88:0e:d8:1e:dc:16:15:02:
81:09:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:06 2025 by rpki-client