
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier: UVevW9I04WN6Xso7GsNzkqABUtl6YF8hIVjt/R3oVWE=
Subject key identifier: CB:F4:FD:F2:53:B7:1E:A3:B0:FB:04:95:9F:59:9B:25:F7:34:93:FE
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial: 019889FC764C5909436876A6DF7BAB286FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number: 10AC
Signing time: Fri 08 Aug 2025 14:01:20 +0000
Manifest this update: Fri 08 Aug 2025 14:01:20 +0000
Manifest next update: Sat 09 Aug 2025 14:01:20 +0000
Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: 5DGbA8U8Qf6itAgAdI1GXEL9Uu/9agms7CQx9i8RCnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:76:4c:59:09:43:68:76:a6:df:7b:ab:28:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Validity
Not Before: Aug 8 14:01:20 2025 GMT
Not After : Aug 9 14:01:20 2025 GMT
Subject: CN=cbf4fdf253b71ea3b0fb04959f599b25f73493fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:60:c1:0c:06:49:08:25:e3:1f:c0:4e:8b:
80:4a:99:c4:0f:a6:84:95:19:c6:d2:d5:e0:1c:a9:
ca:f9:96:c7:ee:d0:c5:a5:44:ba:3e:a8:ca:ba:43:
38:8e:ba:2d:2e:03:4f:36:25:92:ca:4f:75:27:ba:
54:23:fd:48:ed:73:c6:05:7c:05:b6:f6:d0:37:7d:
68:a8:e6:66:96:41:fc:11:a1:f6:d3:da:5c:19:4d:
2f:f9:8a:f8:ce:85:3a:bb:55:ea:09:bd:02:1c:2b:
b2:87:77:9e:e0:de:d4:75:65:5d:f1:54:ae:52:49:
aa:4c:fa:60:0b:24:b6:01:01:82:b3:ab:f8:3a:18:
7f:0e:08:96:bb:6c:36:fd:8a:5c:0d:de:88:86:b6:
ad:da:43:be:dd:78:9e:2a:38:10:db:ab:20:df:b4:
4e:bd:fb:c2:ea:49:dc:4d:e5:e3:e7:0a:65:d5:25:
a0:5e:62:5e:e0:52:45:17:d8:54:8a:37:8c:89:9e:
e4:31:fc:35:52:a5:de:b8:32:ff:1b:a0:ae:a2:62:
49:86:fb:bd:b3:20:13:fc:9d:62:78:9a:9c:25:6a:
0b:de:a2:ef:c6:16:21:a8:c4:1b:af:c1:80:65:89:
f1:9f:ad:88:42:27:46:a9:38:da:2b:9e:46:1e:9b:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:FD:F2:53:B7:1E:A3:B0:FB:04:95:9F:59:9B:25:F7:34:93:FE
X509v3 Authority Key Identifier:
keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:8e:5b:93:24:3f:2d:c1:b3:68:03:a1:5b:ba:23:15:6e:
29:4c:34:8e:e0:4d:b5:ce:05:96:88:97:95:2e:9c:9e:8b:fa:
3e:67:28:7d:59:77:5a:82:b8:42:b9:4d:38:48:74:79:65:cf:
8d:fc:ee:43:f9:d0:13:81:c0:1d:5b:96:79:91:de:aa:92:1c:
e3:b2:a2:0e:33:f4:17:5b:ca:73:05:a8:0a:34:b0:6d:8f:6c:
8f:bb:b4:15:fd:61:ca:41:35:46:7f:e6:d1:5d:f3:0d:b5:2d:
19:f1:67:31:76:28:8d:7d:96:98:d6:a5:e0:d1:51:64:af:19:
c8:8d:f2:7c:60:56:3c:41:f0:7c:c1:bc:53:fa:e6:1d:29:99:
3d:18:5a:ae:d6:c3:1e:54:8b:b2:57:8c:fe:9f:dc:9d:e5:e4:
76:e5:17:95:b7:c6:0a:6c:99:58:ab:48:d4:3d:f2:49:26:f8:
9d:5c:cc:36:3f:07:a4:f1:b1:9d:3a:9d:be:e8:27:67:94:e7:
bd:f3:32:44:74:be:09:dd:9e:3a:7b:73:72:d8:6e:22:3b:bb:
dd:0f:3b:2d:5c:4c:28:de:b3:78:6e:a3:17:3c:a1:9f:79:5e:
e5:ee:03:69:8b:8b:53:48:6f:3b:4c:8b:c8:88:34:ea:25:a1:
30:68:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:46 2025 by rpki-client