Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: Wymgj3toPVbBa7xkQlyLGruo3qrTtSrWs+TXzkrVLqY=
Subject key identifier: D1:1C:84:C8:34:D0:C6:C6:2E:61:9A:65:81:F0:1F:FE:93:01:E5:72
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 0197B6D799DD3027C58D78C6C6CA786AFC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 03D7
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: ZXBJkhXAPtGcsj78Q/TLvburasE+JaE+rQHDb1tTUeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:dd:30:27:c5:8d:78:c6:c6:ca:78:6a:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=d11c84c834d0c6c62e619a6581f01ffe9301e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:09:60:23:b8:67:f2:89:5d:a9:ec:a2:27:
fe:2b:3f:67:9f:ca:c5:4f:a7:e9:36:0b:9d:e7:d5:
a8:f7:3a:24:28:91:ec:a5:c3:27:63:43:25:82:89:
fa:2b:cd:79:82:81:da:b2:65:0b:db:9a:e4:d0:a5:
50:5d:4d:cc:b4:e1:79:ce:3f:6d:c7:d8:83:4f:d3:
64:d7:e2:7c:a0:f8:84:eb:84:5f:d5:c5:51:90:e1:
5c:38:8b:0e:3e:9a:c6:e7:fd:32:86:88:09:a1:39:
00:c9:4f:19:a2:d6:ee:54:29:15:6c:18:05:0f:12:
d6:98:0c:99:2f:2f:43:aa:63:d0:ec:a0:5c:d7:d2:
e0:0e:c2:73:db:b9:ea:0a:aa:63:35:cc:de:a8:a7:
f3:f9:c6:17:88:99:5a:50:a8:c2:8c:12:20:f1:af:
4f:80:04:a0:ba:87:ed:89:84:a5:19:f1:de:a9:16:
12:c8:e5:76:f6:70:6a:eb:67:67:d9:21:26:25:0c:
9c:02:8a:87:75:7e:d4:e3:4c:dd:7d:e7:eb:ae:e0:
1b:09:3f:41:4a:52:85:fa:b4:3f:5a:08:9a:81:a8:
b9:9d:b2:fe:8f:c6:46:f5:a8:a7:e8:50:33:b1:61:
2c:ed:9a:8d:c4:22:89:c7:c9:64:6f:97:62:c7:1f:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:84:C8:34:D0:C6:C6:2E:61:9A:65:81:F0:1F:FE:93:01:E5:72
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8a:c6:dc:8c:be:00:dc:25:be:65:78:e6:18:ec:db:0f:db:
04:41:76:3f:a9:f2:ee:9a:bc:6a:b2:6a:8d:1e:b4:5c:29:38:
a9:0c:f8:3d:42:36:ae:54:4d:aa:e3:37:d3:a8:cc:71:ab:7c:
03:c1:8b:8f:30:7c:d5:b4:5b:c2:36:7e:bf:b7:d5:c3:b6:fd:
4f:13:a0:01:ab:46:32:56:10:35:e8:a2:4c:5a:a9:6f:d0:c0:
1e:36:89:b3:84:10:c7:20:67:8b:97:ac:97:a0:63:68:7e:0b:
df:fc:00:70:0b:4e:8c:0d:de:d7:82:8b:6e:39:d6:44:95:26:
88:90:e8:a1:28:b6:a1:10:0d:d0:be:6b:a8:aa:8d:ea:17:59:
34:e1:a8:8d:86:47:57:c3:51:e2:a5:f7:e2:16:43:ae:6c:b9:
49:9b:13:2d:8b:0f:56:25:32:6d:ae:86:ca:9f:44:ff:ec:2b:
52:70:28:71:02:16:97:db:fa:a2:c3:6e:4c:ca:e8:9f:c6:66:
2f:30:86:ac:87:00:ea:b9:16:04:0c:73:5f:ec:94:8a:54:3b:
03:68:3e:f8:7b:f3:95:29:fc:72:e6:a8:7f:40:2b:b7:e6:83:
66:52:b5:66:ed:3b:b4:bb:21:f1:44:db:6b:45:db:fa:1e:dd:
63:b5:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:25 2025 by rpki-client