Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: 7ddwriDZvPjd7BCMamjhPOIS33iM3wC0phjbbSH1Tes=
Subject key identifier: A3:B7:1D:F6:3E:FF:A6:40:6E:86:4E:60:E5:7B:FD:05:ED:10:CB:B3
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019883563B854490835887D9F1250205CD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 1253
Signing time: Thu 07 Aug 2025 07:02:03 +0000
Manifest this update: Thu 07 Aug 2025 07:02:03 +0000
Manifest next update: Fri 08 Aug 2025 07:02:03 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: YIX2wfROHJgVEdRwW6blgJHxQRRJeEryvXlgbIS1mxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:3b:85:44:90:83:58:87:d9:f1:25:02:05:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Aug 7 07:02:03 2025 GMT
Not After : Aug 8 07:02:03 2025 GMT
Subject: CN=a3b71df63effa6406e864e60e57bfd05ed10cbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e2:97:51:2e:9e:1a:e6:9d:c1:98:32:3f:73:
ca:ae:49:31:c7:b7:15:8c:12:6a:8a:df:a6:77:4d:
d2:64:d4:8a:06:c0:41:0d:c1:9b:28:a4:a5:bd:ce:
fb:7e:25:5b:45:50:23:5d:bc:93:bf:59:ee:48:cb:
41:5e:da:41:da:9b:96:62:ec:01:01:23:5e:71:59:
63:86:5a:6e:a0:06:ee:3e:51:e7:bb:6f:5c:98:1c:
7e:b2:b3:d4:19:21:1c:a8:e7:d1:59:ac:78:d0:6d:
8d:89:75:5b:ce:d4:df:31:01:74:56:ca:f8:88:9e:
64:e9:d0:52:c4:cb:8e:a3:83:a2:17:97:3f:7f:e3:
2c:25:67:ff:61:27:23:5d:c3:b0:6d:92:8b:17:6c:
1d:5e:36:09:ac:9c:14:b2:ab:1b:9a:01:5d:13:3d:
b9:53:7a:b5:40:db:32:c6:44:95:4e:a2:77:8b:b0:
47:cd:03:b0:45:ae:f1:05:7d:95:da:8b:07:8a:0e:
70:e5:20:2c:77:d3:90:d8:4e:47:66:01:77:d7:1a:
82:7c:dc:cc:e6:e0:94:61:9c:e2:e4:59:1f:0b:d8:
b8:a9:e3:25:3e:ed:98:a0:b3:65:e9:10:5f:1d:be:
c6:fa:f6:02:8b:88:b5:2e:73:65:ae:eb:90:e5:19:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B7:1D:F6:3E:FF:A6:40:6E:86:4E:60:E5:7B:FD:05:ED:10:CB:B3
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:90:4b:21:b9:46:fe:34:18:9e:2a:5a:42:95:a9:f4:22:fe:
fd:c7:1c:73:d2:60:45:3d:55:8c:d7:19:21:0e:75:ce:ea:36:
3e:66:e5:8e:70:2c:83:5c:a0:93:9a:67:b3:d1:99:58:33:04:
ca:06:66:40:91:e4:96:d7:e3:ce:e8:3b:79:e5:67:93:86:09:
66:2a:80:c9:3f:71:fe:fd:3e:3e:8c:08:88:8a:43:72:15:3d:
13:6e:43:23:ae:2c:0a:bb:f6:2f:81:09:55:cf:38:91:b5:55:
86:07:5f:7f:e7:4e:99:8f:d0:3f:b5:e0:50:52:94:35:bb:b3:
98:11:7e:d1:0d:41:b0:3f:dc:66:17:e2:1d:e3:fd:ab:3d:15:
4d:a5:d6:68:d0:2b:7f:4f:86:40:41:cc:2d:53:e8:4a:1b:f5:
70:9b:dc:bd:e5:b1:15:0e:e7:74:45:fe:06:75:5a:cc:55:b4:
f0:68:64:4d:1e:1d:ae:8f:40:06:8c:d2:ee:14:31:e0:4e:d0:
0e:7c:6f:ea:4c:7a:af:72:8b:0e:06:06:28:38:7f:e0:fd:8b:
a0:95:f6:1f:e7:db:b8:28:22:dc:59:38:8f:a5:e3:e6:02:2e:
e6:e0:81:63:bd:0c:74:64:8f:06:cb:55:db:fa:b7:4e:04:1f:
ac:b7:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:54 2025 by rpki-client