Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: oeUhrewEMpOC3/aRzphD6agPAZfZzfYP8jjqz0W+Gb4=
Subject key identifier: D2:07:FF:8C:19:07:90:8E:27:74:BB:69:87:88:9A:67:51:2E:59:75
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 019873E2180BF507E50334BCB5582032C8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 0825
Signing time: Mon 04 Aug 2025 07:00:53 +0000
Manifest this update: Mon 04 Aug 2025 07:00:53 +0000
Manifest next update: Tue 05 Aug 2025 07:00:53 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: 1kHSSknALLk0Ms4Bv0pJVizGo92XV/6mHagWPJCw8mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:18:0b:f5:07:e5:03:34:bc:b5:58:20:32:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Aug 4 07:00:53 2025 GMT
Not After : Aug 5 07:00:53 2025 GMT
Subject: CN=d207ff8c1907908e2774bb6987889a67512e5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:c4:4c:46:e4:b0:04:f5:a0:cf:a4:25:2a:
13:d1:6a:a9:65:d8:a4:69:31:78:49:f1:d0:8c:cb:
f3:a8:f6:b6:f8:da:b1:5e:f5:cf:1b:1f:e0:b9:c6:
15:ed:b7:4e:ba:b4:b7:d5:6b:57:99:26:3b:63:2b:
82:d6:aa:30:d4:f5:3b:10:5a:35:11:2a:07:b7:49:
a7:fc:4d:3a:58:ca:f0:24:dd:63:7a:aa:47:56:a8:
07:c2:1e:0a:99:1d:97:22:02:eb:92:9f:f6:91:69:
9b:4a:16:a9:93:b1:7f:90:eb:83:bb:60:7c:80:d1:
78:c2:2a:e3:d7:ad:43:20:61:50:42:8d:5b:54:9f:
91:b5:9b:08:a4:df:d1:3c:1d:57:15:5b:2b:97:5c:
0b:80:02:5f:85:7f:e0:1a:e9:22:6d:3a:6d:92:94:
78:e6:ea:e8:27:6d:4a:4b:71:25:65:f4:60:ce:01:
8f:d1:78:e0:6d:7c:72:fb:4f:a2:9b:44:33:a2:d9:
1f:2c:0a:41:d3:de:6d:6a:0c:42:ae:f0:68:ef:a1:
95:21:5d:3f:a0:52:53:2b:55:9f:2a:f7:56:48:b1:
9c:72:ed:56:f0:e3:c7:39:87:d8:74:74:24:39:73:
2f:a4:ba:0f:f8:62:ba:65:cd:3b:84:5f:9d:73:e6:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:FF:8C:19:07:90:8E:27:74:BB:69:87:88:9A:67:51:2E:59:75
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:5d:b0:6f:4c:f9:15:ef:e2:d2:97:50:0a:d1:93:39:da:
4f:8c:24:06:6f:6b:09:b9:b2:1d:3b:4c:9c:6b:d7:88:15:d2:
b5:c3:44:6e:78:db:30:63:71:d2:4c:bf:e2:df:64:a8:a7:9f:
0e:37:47:ee:e9:35:54:9b:8c:26:b1:ed:8f:d9:10:8f:cd:55:
d5:d4:dc:14:83:52:c3:6f:6f:26:b3:fe:51:8b:5a:6d:05:2c:
7c:38:5a:56:87:b2:ce:76:ee:70:5f:e2:cb:a4:a2:78:a3:d9:
be:89:1f:15:59:20:66:22:65:f5:ef:09:6d:2d:39:97:d0:87:
f7:03:2d:1e:71:93:86:d8:4b:98:34:a7:d8:10:fb:c3:0a:66:
9b:6a:23:8e:ec:27:23:35:38:f2:75:9f:f6:75:29:f9:9b:c4:
80:da:96:59:56:87:91:68:49:e4:95:3a:ad:f7:39:bd:3d:bd:
00:61:f7:a6:bd:54:c8:78:d4:39:63:a8:62:5e:a7:a6:57:b5:
73:17:3b:d6:f3:07:36:1b:2a:f3:03:33:f2:94:92:98:f4:6b:
10:84:2d:97:96:06:26:58:07:13:30:27:d7:25:bd:12:97:77:
6b:7b:0c:6e:36:3f:e2:02:39:02:c9:52:02:56:7d:5f:ab:49:
d4:8f:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:47 2025 by rpki-client