Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: FcNdJjSBT8vVPkxNYV9rS8N3Nux4x71C2BuLUPahAUI=
Subject key identifier: A7:C1:3B:20:52:14:DD:5F:BD:D2:F3:E2:0C:CA:FA:A9:67:86:1A:3F
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 0198D5F1B63FC13AD168154BA9FEA4B87907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 20
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: edGqWEPJrMndq+n/n099QQYIVagfXffncsb5uFwKCeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b6:3f:c1:3a:d1:68:15:4b:a9:fe:a4:b8:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=a7c13b205214dd5fbdd2f3e20ccafaa967861a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:4b:0f:e8:f9:3c:40:79:f8:76:21:38:13:
d0:3f:5e:78:fc:48:52:e2:bc:9e:8c:83:ab:72:2d:
db:a1:1b:a9:84:47:1d:6a:5d:02:fd:79:3e:31:38:
73:2d:ad:99:88:dd:ba:65:cf:eb:ce:fe:c4:1a:94:
27:6c:37:1b:f2:5c:31:45:47:91:3f:b9:01:b9:a0:
92:c8:cd:4c:29:b0:05:55:c7:1b:ab:08:6e:2b:a9:
b0:e3:4e:bb:54:7d:8c:6a:63:24:d7:2a:17:4c:9d:
48:2f:f9:3c:0b:0c:72:90:b8:fa:f2:a9:6e:fe:cc:
88:66:49:fd:8c:3b:7e:d7:c1:38:92:6b:e3:95:68:
20:c9:a3:d8:11:fd:46:29:c1:c0:53:55:b4:dd:8e:
96:75:7b:9b:41:c6:b8:c4:9a:fc:37:a5:f7:ba:e1:
e2:18:37:44:40:46:ec:51:1c:71:44:c6:07:cc:f2:
78:33:26:05:bc:6a:f9:e7:42:d9:3f:aa:ff:f1:4e:
a9:39:6d:bd:9a:76:f9:06:e1:8a:97:f4:1c:22:93:
46:ab:af:e2:bb:df:ff:3c:05:f7:11:8e:59:61:0d:
90:aa:b3:8f:a8:40:b0:51:9c:04:5c:0f:7e:d5:0b:
73:ec:09:10:69:dc:c3:a4:c1:47:2c:94:be:05:57:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:3B:20:52:14:DD:5F:BD:D2:F3:E2:0C:CA:FA:A9:67:86:1A:3F
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:ae:3e:36:cb:cc:eb:94:38:5e:bc:ec:74:f3:38:82:99:
c3:f0:98:43:b7:75:b9:6b:38:a1:64:24:04:15:cb:8e:4f:29:
e6:3c:a6:cf:ec:f8:ec:57:78:f9:22:2a:cb:fa:60:f9:9d:2c:
43:18:5f:8b:f9:3f:5a:8a:7f:8d:37:6e:3c:5d:4f:c9:f7:e0:
75:a5:5a:a5:6c:0a:16:f3:f3:24:be:40:db:f3:16:1d:d1:08:
e0:a0:27:be:e6:1c:05:5c:2d:62:a5:f1:d4:43:b5:0f:0d:f3:
7e:e1:ce:e1:49:27:59:0d:37:f5:d5:43:7a:1c:89:cb:f4:f4:
20:7e:5c:24:3d:b3:b6:83:10:98:c1:bf:44:19:84:51:4a:b4:
fd:4d:6b:4e:c2:63:69:53:a7:a5:4f:5d:e6:58:7d:6e:c6:1d:
52:c5:83:24:d5:0c:0e:aa:27:33:df:a1:b2:d5:5a:56:4d:59:
49:75:51:cd:49:30:d0:bf:15:4b:dd:e8:35:9a:2d:bd:84:f1:
31:25:d1:8d:48:e7:16:a0:51:1c:b0:9a:7f:0c:c1:38:c5:3b:
c4:af:4d:21:a3:92:01:34:28:5a:18:93:7b:a1:06:56:b5:1d:
2e:6a:14:d1:33:38:80:12:b2:14:97:b5:e7:4e:7d:bd:b4:0b:
cd:11:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:55 2025 by rpki-client