Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: ZJTvi5UqTiFe2ac/VUGafD2p2tRU5njj1X2UK2CYkXk=
Subject key identifier: 79:D4:AE:B4:78:C5:D0:59:03:19:5C:1D:E4:23:F8:AA:C4:E6:62:A7
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 0198D4E016CDDFBB7BC7729491DFB0BD09F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: iqYN4I+reFul/djUoJfc2QxOYw7/lJqkXfNQ+y69W8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:16:cd:df:bb:7b:c7:72:94:91:df:b0:bd:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=79d4aeb478c5d05903195c1de423f8aac4e662a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:3e:e4:05:55:aa:37:78:0e:c1:5f:45:57:
b1:31:8f:6c:aa:ca:7b:31:7e:b7:86:e3:83:f6:be:
37:28:3b:1c:f2:41:41:c1:03:e4:81:65:65:11:46:
75:f4:02:b3:22:3b:d5:62:9a:ac:55:0e:d9:90:4a:
84:89:79:20:70:6e:01:64:15:69:18:33:de:b4:34:
63:05:6f:70:1e:9d:ac:ab:79:0c:fa:e1:6e:80:54:
e5:48:ae:0f:92:c7:c5:83:62:76:00:95:87:80:6e:
16:84:4c:f2:d2:4e:49:c8:1e:75:1d:a0:84:3e:f2:
23:13:83:a7:c0:2d:5a:9d:89:a0:a0:af:01:7d:2e:
68:60:85:e5:ec:86:0c:71:34:7e:df:46:0a:ee:7d:
93:77:91:7c:5b:1e:c3:04:ff:17:3f:a2:dd:03:e5:
ab:ef:cb:73:2e:a6:04:85:d0:5d:1c:6e:ca:9c:e5:
03:35:64:d4:ec:2e:9f:8e:87:2c:b4:c5:e1:bc:a1:
6b:1a:07:8c:f8:97:09:d3:e7:b6:bb:4d:76:45:2a:
b3:3e:b5:b5:1f:58:e4:de:c4:f4:3a:7c:d3:bb:5f:
83:4f:da:60:7a:db:a7:28:14:5b:c0:c8:42:f7:3b:
52:fe:05:f2:2d:d2:82:f8:a7:ce:29:1e:9f:f4:69:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:AE:B4:78:C5:D0:59:03:19:5C:1D:E4:23:F8:AA:C4:E6:62:A7
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c8:c5:70:6e:12:a9:14:8d:d6:d6:85:2c:67:48:f4:b4:79:
15:3e:b3:38:0f:54:85:11:de:ac:01:b4:b2:63:ca:aa:78:a7:
45:17:65:11:ad:0c:56:d3:27:0b:87:30:d2:ba:6d:3e:5f:9a:
5f:16:58:d4:37:cf:01:2d:35:7d:b8:44:2b:47:80:41:7d:c1:
95:3c:fb:d6:56:c4:be:75:7a:eb:f3:c0:56:b7:cd:04:cd:5a:
1a:37:de:e4:1e:c2:d9:bf:aa:16:d8:ba:75:42:5a:d8:13:bd:
5e:08:88:0f:39:fb:1c:b8:01:2c:44:29:14:be:1b:fb:bf:48:
ea:df:d3:6d:d2:db:d3:61:ab:a3:78:b0:e3:11:0e:2b:47:fa:
13:cf:26:b9:59:f1:af:27:93:8e:aa:8d:3a:f7:25:c2:71:2b:
78:37:12:dd:1e:2f:f7:ee:9a:97:6d:d8:3a:0b:ae:9c:e8:dd:
d9:6a:94:aa:93:2e:dc:c3:41:16:b3:5b:c1:18:8f:08:d6:bc:
d9:5c:7b:77:7b:60:12:16:7b:92:a6:4e:af:37:77:9e:d9:75:
c7:3a:d5:a5:fe:16:d9:32:53:d9:93:57:8b:da:2c:0d:42:ff:
b5:ee:70:e0:0e:81:ad:cf:53:bd:d5:75:48:01:35:83:c9:04:
4b:48:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:01 2025 by rpki-client