Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: HlHZkl6fNi436m4xi+hg39VHo/zcViswsa41mnYUBn4=
Subject key identifier: 84:3E:3B:AD:0C:C2:06:3D:7D:0F:0D:EE:AB:C4:6A:A7:7D:F1:FA:58
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 0198D515D3107DDE2DA73730A51A77426801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0B2C
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: dbxREZaWIG1jaj50X1qtFskqAgBWavoIVNnxr2+QWCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d3:10:7d:de:2d:a7:37:30:a5:1a:77:42:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=843e3bad0cc2063d7d0f0deeabc46aa77df1fa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:76:6a:f1:77:7a:cf:61:9a:b8:ee:2f:7f:
98:57:19:12:af:87:97:0c:e4:66:c2:77:0b:5c:84:
e8:56:e0:32:28:bf:9c:4f:34:d8:98:37:95:45:2c:
b8:28:be:33:b7:b1:58:24:a6:0a:3a:13:d0:4a:a8:
87:21:ed:ed:e1:03:2e:7d:1e:30:9f:f9:95:26:36:
58:fd:bf:cf:f4:52:1b:ed:29:25:67:1f:7f:c2:41:
5e:38:a5:93:4e:f5:fb:5b:3b:f9:41:dd:3f:73:f1:
28:4b:4a:91:22:ef:bc:3e:8c:e9:50:61:eb:87:22:
ec:e5:fe:fb:72:c6:79:3b:7f:c1:8c:14:43:b1:c8:
69:0f:30:59:4a:f0:b8:9d:9e:2b:cf:cf:7f:5d:46:
b1:a0:87:29:84:17:7a:5e:7b:40:22:b6:c2:35:44:
d3:27:04:d5:2f:0d:c3:25:bd:00:15:e0:17:f0:b0:
57:9e:3f:d8:25:77:c4:5d:08:63:87:fa:63:da:bb:
5a:92:c3:09:16:23:3a:ad:a9:ac:67:18:66:64:9e:
d8:8f:f7:c8:2b:b8:74:6a:65:e1:ce:e8:dd:fc:f9:
b8:75:f1:17:ea:e1:f0:48:f3:9a:94:91:fb:13:d9:
a6:5e:84:18:76:71:9c:23:fc:ce:86:a3:03:d9:5f:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:3B:AD:0C:C2:06:3D:7D:0F:0D:EE:AB:C4:6A:A7:7D:F1:FA:58
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:91:c5:cc:de:b6:57:b8:2d:66:dd:e3:dd:a7:f3:fd:41:
a4:3c:80:cd:11:93:af:12:0f:f2:75:1e:ce:93:7a:e0:f5:0e:
61:81:64:91:25:d1:ae:a3:a9:8f:94:c9:f8:b8:f8:0e:ba:19:
12:6d:5c:f1:93:e7:3c:bd:86:71:5c:2c:28:b5:6e:e8:b3:39:
f5:f4:cc:e5:48:f2:65:c5:20:af:51:be:ba:45:77:91:c3:d9:
35:21:bd:39:b3:06:08:41:9a:a4:6e:b9:76:0a:ae:7e:29:38:
85:dd:c1:28:57:11:53:45:51:6d:1a:d3:f4:fc:84:07:b0:a6:
84:ad:63:fa:fc:ff:17:ca:02:6d:7f:67:67:55:5c:14:0b:eb:
3c:99:d3:01:86:7f:0b:96:d2:a7:ce:fb:54:54:61:23:5d:7a:
c1:27:e5:7b:6a:76:1e:86:ec:21:5b:79:eb:46:d0:5d:49:38:
3d:99:b0:d3:43:70:3c:46:8b:2a:6a:db:44:2c:c8:20:60:00:
ff:b5:5c:3f:5a:4c:a1:bf:ae:9a:ec:b4:37:9b:af:7f:04:9e:
68:26:8f:60:3f:91:0e:4b:72:5d:18:4b:df:a0:bb:03:67:75:
a4:a8:e2:13:7d:20:9c:13:08:f1:59:e2:cb:72:13:63:b2:f3:
2b:7a:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:51 2025 by rpki-client