Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: K9yfie9xyYNP+XunaeCfVTYMjCwbx9rBgfeTFS+m4KI=
Subject key identifier: A2:68:8B:2B:93:87:5D:C3:C9:03:B6:9C:83:51:A3:03:FF:0F:0F:A4
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 019892C8384F9552BF142E65298268F0C48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: DB
Signing time: Sun 10 Aug 2025 07:00:51 +0000
Manifest this update: Sun 10 Aug 2025 07:00:51 +0000
Manifest next update: Mon 11 Aug 2025 07:00:51 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: W1gUnaEzSgZuFnGx/Tji7EezHxzQFRchwKGeQZdUkBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:38:4f:95:52:bf:14:2e:65:29:82:68:f0:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Aug 10 07:00:51 2025 GMT
Not After : Aug 11 07:00:51 2025 GMT
Subject: CN=a2688b2b93875dc3c903b69c8351a303ff0f0fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a9:25:c1:f7:14:9a:fb:86:85:c4:05:a2:47:
9a:91:8a:1e:a0:fe:19:c1:f4:53:42:53:05:b0:e0:
b0:e2:06:6d:24:0d:c9:f4:cf:82:65:ba:2f:92:48:
86:f6:35:40:af:e5:11:ee:d3:6f:39:7a:24:7d:93:
ce:86:77:75:d5:c5:bd:49:90:99:03:d0:98:35:35:
67:0d:33:cc:c0:60:7c:82:9a:bc:8d:9d:9e:89:54:
2f:37:03:ac:4a:3b:c7:89:1d:de:7f:64:93:39:ba:
72:a7:c6:0a:ae:84:2c:8e:83:00:3b:d4:c8:c1:fb:
40:3b:1b:c1:43:4a:a3:2f:6d:28:f9:28:cd:b7:8a:
22:ba:8a:f0:6f:30:dc:50:ab:f7:b3:5c:ba:49:93:
4c:12:04:d8:ac:4b:70:38:eb:00:14:ee:38:ff:f7:
e1:d7:12:f4:6b:df:e8:18:e0:1a:95:55:b3:8d:7a:
48:61:7c:77:75:59:c5:a8:51:8d:00:47:28:37:5f:
a7:76:10:7b:36:54:41:ed:d8:6a:4f:2c:7a:65:a3:
c2:03:93:c7:2f:fe:73:7e:b0:b0:89:23:4b:b7:db:
12:0d:b4:d4:6c:96:ae:29:df:45:67:e2:4b:1b:63:
f4:3c:11:a7:2b:c5:79:79:a3:d5:98:fd:f4:38:1a:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:8B:2B:93:87:5D:C3:C9:03:B6:9C:83:51:A3:03:FF:0F:0F:A4
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:bc:35:f6:76:bb:fe:5d:76:29:43:c8:6b:fc:f8:da:30:
df:da:f5:6e:4c:52:4a:7d:de:8f:73:74:e8:7f:f8:30:63:25:
25:5b:1a:32:70:cf:18:a1:a8:41:59:22:bb:4b:bb:ce:12:77:
1b:58:1b:65:ae:90:b7:22:59:f4:11:77:55:31:82:12:a7:60:
9d:93:7e:1b:d3:39:f2:f6:f7:c7:7d:6c:2c:b9:c0:79:b0:23:
22:c0:a3:f4:f8:50:70:d4:0b:3a:d5:ad:f8:52:e7:9a:b5:16:
06:31:d2:4e:aa:2c:30:e9:46:67:24:d5:a5:7b:be:75:92:cb:
54:02:21:b4:37:35:f4:a9:4c:a8:52:e3:d8:92:6c:c3:05:0d:
54:ad:f9:25:0c:3a:22:7e:42:9f:5b:78:37:72:80:42:58:21:
0e:fe:53:ce:b8:15:ce:d7:4f:9d:ec:76:d4:52:e2:2f:72:0d:
ab:8a:a0:7a:93:1f:5c:f5:5a:17:53:8b:04:97:57:f9:6b:1b:
36:5e:93:37:e5:d7:3a:59:54:08:38:20:3f:f6:25:56:c5:9b:
96:e7:63:8f:82:49:00:8a:e7:dc:d2:6a:9e:69:1b:96:c6:3e:
91:3b:e1:8e:ed:b5:5f:71:ad:b6:2f:43:d8:ba:71:3e:18:4a:
f2:0c:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:35 2025 by rpki-client