Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier: hrFGxsvnYZNooudPtQ2+vnC1GajTE9obRSUL94gMLnU=
Subject key identifier: 0E:06:0E:73:F9:2B:5A:1A:81:07:D1:6F:D9:5F:01:3C:5E:DC:49:0B
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial: 0198D54EB3EF4EA43A7C31239C5F84047F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number: 1041
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: qcL3pW3zat8cb5c3gQYUdRULb6EIlG0tdF3i9uVsX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b3:ef:4e:a4:3a:7c:31:23:9c:5f:84:04:7f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=0e060e73f92b5a1a8107d16fd95f013c5edc490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:c0:d6:ed:70:b3:4a:42:f7:64:91:27:15:
b3:70:64:1d:80:13:e1:b8:b8:fa:ac:a0:02:fa:12:
69:99:62:7b:b4:51:ef:f3:f9:30:15:94:25:d2:ca:
06:28:8e:6f:8a:bf:52:76:1a:70:a6:fb:9e:62:e0:
77:bf:b8:dc:1e:74:ce:10:ce:a2:04:33:f4:f2:3c:
e5:39:4c:da:b7:ed:34:fa:d4:69:78:ce:cf:be:50:
ba:12:c9:5e:04:c2:bc:88:22:81:1b:c0:58:df:5d:
71:06:48:7e:54:ef:81:0f:45:7d:fd:6b:ba:c2:e4:
d6:90:fe:06:fb:12:22:0b:44:fc:7f:6e:64:1b:e9:
be:7c:72:fc:55:a5:18:59:a6:b4:cb:50:de:82:b1:
ab:ab:9a:4a:7a:d7:76:25:d6:3b:1b:46:94:1b:cd:
ed:53:07:aa:1a:40:49:88:73:4e:1b:c7:2f:1c:92:
96:61:8a:ea:fb:1e:78:c0:ea:c4:0a:a2:24:be:b2:
2c:e4:7f:6a:79:4e:78:9f:66:40:8b:a3:6c:cf:fb:
3e:c8:d5:0e:b4:bb:f9:f6:07:71:9c:a0:30:91:14:
39:9c:42:51:e5:8d:de:80:57:85:ef:df:41:a0:b6:
0d:f7:42:eb:04:4a:38:6e:5e:c3:07:82:ba:17:21:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:0E:73:F9:2B:5A:1A:81:07:D1:6F:D9:5F:01:3C:5E:DC:49:0B
X509v3 Authority Key Identifier:
keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:88:ce:a7:57:08:81:99:0c:fc:20:53:86:7f:ee:63:fd:
49:a3:66:0c:b1:43:03:60:94:64:b8:13:80:0c:ca:62:d0:02:
d4:40:8e:e2:bc:fa:1d:b6:d3:14:b5:a4:71:9d:20:fe:21:ee:
c4:2d:13:48:6b:96:fb:d5:71:ea:2b:af:cc:7d:ef:ac:ab:fd:
9c:78:2a:35:36:0d:41:e9:9c:cf:d4:0d:3f:8f:c0:ed:00:dd:
1c:7a:46:d5:ae:e4:cc:27:4f:7b:b6:bc:a9:8f:dd:3b:5c:38:
f9:ca:87:21:a9:ca:95:82:b4:45:54:b6:ab:1a:17:29:89:55:
f0:36:06:f9:78:f3:6f:ce:65:ac:ef:f0:8d:ea:b7:99:ab:67:
e2:37:2e:cf:4f:ac:18:e1:4a:c9:78:fc:8a:22:f8:4a:43:b9:
d4:49:10:86:85:d7:95:c6:7d:58:01:41:2c:74:2c:77:fc:42:
21:8c:0c:a9:04:b4:a6:06:35:ab:6e:45:d8:8f:ad:74:5d:29:
7e:68:38:c4:27:4c:4b:4c:4c:93:ee:01:c7:d1:00:f1:3e:a8:
db:f1:f1:a2:57:f4:8c:db:83:68:1a:ef:20:8a:c6:27:9d:d1:
8c:92:a6:c0:0a:67:6f:a7:17:04:e4:5f:82:7e:e2:42:d8:7c:
85:27:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:59 2025 by rpki-client