Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: ck0WLCftw5q9bFwA5znkwQZYhdx4A0k61rRPnwCXUBc=
Subject key identifier: 28:41:C3:C8:C0:2E:AB:65:E4:95:15:9B:DB:B9:9A:18:73:EF:31:83
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 0198D5F118838D5E0C6F34B704F0C717E6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 0679
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: zObU2qDlEJYzFtoojDdvcvE/UdzREAvR5A1YsB3Z6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:18:83:8d:5e:0c:6f:34:b7:04:f0:c7:17:e6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=2841c3c8c02eab65e495159bdbb99a1873ef3183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:cf:9a:55:1a:bd:cf:ef:54:f5:7e:49:c9:
b5:08:55:c1:7b:40:9e:2c:3c:ed:b3:39:de:fa:17:
fc:65:17:4d:90:c4:bb:da:70:be:61:3f:b8:7f:77:
7e:d3:06:5c:28:52:77:af:e2:23:f5:98:e6:23:51:
60:43:0d:93:06:0d:3b:c4:2f:6d:5a:1e:6f:f4:df:
9c:98:e4:36:b0:32:e8:98:70:5b:c2:06:c8:24:5d:
27:58:64:5a:6e:2c:33:7d:9a:83:01:8b:c5:98:a1:
1d:8c:4d:b1:21:3a:ce:97:01:07:36:0a:f2:61:77:
d4:1b:c4:72:f8:50:54:57:28:a2:40:33:de:7a:e3:
6b:df:b6:10:13:3d:e7:66:b1:96:4d:bd:20:45:4f:
ca:af:43:9c:0f:49:12:73:3c:9a:75:97:d3:cc:06:
f0:d3:78:6e:ce:d9:f1:fb:db:98:fd:8d:0b:86:2d:
f5:84:ec:dc:11:18:0e:02:19:6c:1a:63:7c:c3:96:
46:58:a9:2d:f2:ac:fe:92:03:0f:50:ab:f8:41:39:
c6:e3:6e:79:d6:97:e8:7b:d4:b0:fc:f5:7d:d0:fb:
e0:d9:69:a1:9c:cf:c9:e8:a7:d1:af:98:bd:f0:6e:
71:83:4b:dd:ce:35:d5:77:cb:50:a8:d0:ea:c3:18:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:C3:C8:C0:2E:AB:65:E4:95:15:9B:DB:B9:9A:18:73:EF:31:83
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:85:9b:6f:22:3d:a3:32:5c:15:2c:4a:fc:c6:de:e8:a7:
cc:2d:08:ab:86:40:c3:a9:b7:ce:66:21:11:be:44:f0:56:f6:
ba:64:7c:fa:c6:f4:30:33:89:6c:63:10:f4:a4:a0:60:0e:79:
d9:a7:a2:5c:e5:dc:90:78:54:7f:75:7e:fc:78:21:fe:fc:77:
05:55:57:a8:9f:00:04:4c:9f:c6:90:47:9a:9d:af:e4:cc:c2:
df:3e:1e:ca:f2:82:7e:c5:74:2f:26:44:0e:8a:21:09:82:d3:
78:a7:07:58:7e:33:b1:29:6d:77:a8:58:1b:6a:19:50:5f:44:
bd:c1:65:76:c9:16:f3:d1:67:35:3a:57:a9:a3:32:af:bc:c1:
f7:dc:3c:fa:80:5c:05:d1:9a:4c:52:f3:00:e9:ef:d9:1b:e9:
59:e4:14:3a:ad:14:2b:c6:c3:73:6f:82:77:f5:35:7e:7d:43:
dc:03:bc:9d:7c:9f:bd:b3:e7:69:da:65:af:e9:91:fa:2a:e0:
9a:9d:09:ad:51:94:b2:e0:ca:d1:13:43:1d:15:3a:d1:1b:f1:
c3:3a:be:fb:fa:a6:22:c7:86:af:60:2d:b3:5e:68:a5:df:0b:
e3:8b:41:7a:dc:90:76:7b:95:38:08:e8:91:00:1a:b1:3e:5c:
77:47:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:03 2025 by rpki-client