Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: g3nqrHYjpOHj43aL67P2JPKJ0SFe3LRlCCjjm8zRKRY=
Subject key identifier: 37:D7:CF:A3:05:7C:E2:E4:46:1F:B8:E6:E8:68:6F:53:78:F3:35:A3
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0198D472AA6C20076B1CBF0DF01E207A626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:21 +0000
Manifest this update: Sat 23 Aug 2025 01:02:21 +0000
Manifest next update: Sun 24 Aug 2025 01:02:21 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: O+9Jiy4WnKaTPfQF1ssMJTUl1iRzvRpxB0uymTQtE88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:aa:6c:20:07:6b:1c:bf:0d:f0:1e:20:7a:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Aug 23 01:02:21 2025 GMT
Not After : Aug 24 01:02:21 2025 GMT
Subject: CN=37d7cfa3057ce2e4461fb8e6e8686f5378f335a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:b9:a6:f9:b3:27:ea:cb:84:d2:bc:86:76:
4d:50:9f:91:8c:fb:7b:5a:5f:fb:5b:b6:43:21:05:
a5:29:bb:2e:83:db:5f:d7:9b:37:e6:1a:fb:f8:d6:
28:72:8d:9f:4c:04:5b:8f:fb:ba:28:3a:29:f9:bf:
76:da:49:5a:56:5e:65:89:c6:59:1f:ef:c3:c1:af:
61:e6:31:a8:92:7e:c9:9a:a3:32:f6:d6:fd:a8:f5:
19:38:c3:78:ff:4e:5e:b6:f0:03:11:1e:2d:af:70:
27:35:93:ab:31:11:bc:53:14:29:10:94:f3:32:87:
a9:bf:a1:a5:2f:7d:b9:ca:40:a0:7c:9b:7c:87:38:
a9:d1:74:72:a1:e2:0e:f4:7e:11:7b:23:58:b2:9a:
3c:55:8b:34:2e:0a:f3:b3:8e:a7:08:a7:af:28:90:
7d:f8:ee:15:a5:e7:47:43:fb:7d:6a:94:a5:f5:2c:
1f:c7:fe:28:31:0c:79:e6:7a:c4:e2:cb:72:f2:6c:
b0:f5:c0:d6:5a:42:8c:fd:66:42:44:1c:4f:a0:2a:
ee:a0:ea:51:10:e5:1f:40:d7:0f:6b:4c:71:3f:5b:
18:ed:cc:c2:15:b9:2b:eb:ec:41:cd:90:f4:40:f2:
c2:23:16:e0:f7:17:76:75:bf:fc:9e:4a:aa:d0:df:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:CF:A3:05:7C:E2:E4:46:1F:B8:E6:E8:68:6F:53:78:F3:35:A3
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:47:f0:60:0f:ee:a1:40:48:b6:2c:35:d1:6f:96:07:ad:
38:53:64:bb:cf:73:1b:43:f9:73:da:1c:b7:1a:8a:40:7e:99:
53:f2:d2:b7:06:ae:1a:e8:a4:71:84:52:e2:db:fa:a1:a4:e4:
d2:3d:e3:95:40:2f:27:11:5d:43:a0:4f:f0:33:4f:5f:68:d7:
d2:ed:05:26:ad:33:a4:41:2c:08:3c:db:d8:11:69:66:41:bd:
fd:80:25:a4:0e:fd:72:bc:20:b5:21:95:ac:4f:fb:4e:9d:0c:
d8:8c:9e:56:b1:57:b8:16:55:a6:fd:30:e9:95:55:7e:ca:30:
d4:a9:45:5e:f9:a5:01:a8:d4:66:43:96:24:a5:88:99:a3:d2:
ad:fb:b1:af:3a:73:c0:8e:49:64:b1:2f:91:80:ca:9d:23:e7:
ad:46:8c:27:77:54:12:4f:87:b2:f6:a5:57:d8:b6:90:69:25:
35:44:ef:2b:94:02:e0:c3:cf:42:6b:0e:c4:9a:a4:24:c4:4e:
b1:5d:cc:05:5c:69:f3:8c:2f:1a:74:6f:9b:01:61:2f:6c:3c:
4a:ac:74:ce:a4:54:6d:ac:db:e3:9f:7d:45:9e:f1:1e:20:4b:
09:c3:b9:2c:53:97:63:e5:7e:06:5b:1a:5b:a3:2f:74:d4:44:
44:73:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:24 2025 by rpki-client