Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: kZ6fqPvJiWKAmtd4SpHznUiRfftjpNi8mZ/Lm9vOkSk=
Subject key identifier: F7:61:FD:10:12:3D:C4:6A:0E:EA:1E:1F:13:CB:89:D5:0C:44:6D:F1
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 0197B70EDEB90A3F831D2F9E97590F827740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0AEA
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: 4jEnTBIhnegVNv6e/HQ7CI3qS9qfRxeFajRiZxpeKqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:de:b9:0a:3f:83:1d:2f:9e:97:59:0f:82:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=f761fd10123dc46a0eea1e1f13cb89d50c446df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:45:99:a6:2a:5d:2a:7b:02:05:26:44:00:
f5:74:52:9d:47:6e:82:7c:ec:84:cd:8d:44:21:d8:
82:16:47:95:6d:2c:b5:5d:38:2d:6f:5b:20:cf:28:
ec:f3:57:b8:6d:c2:eb:37:4a:8a:8b:66:a1:f6:db:
78:1c:3f:c7:08:f8:73:3b:06:3e:de:31:d6:3b:15:
d1:74:ca:ce:59:3d:8a:ae:70:c5:17:04:94:6f:7a:
2d:1b:15:48:3d:07:a6:5c:93:9d:5f:02:5d:3e:dc:
51:61:a2:52:64:5a:05:8f:bc:df:f9:41:21:f9:4d:
50:6a:84:7e:2a:7e:a9:b8:8f:f3:fd:e2:b4:23:b4:
49:fd:a8:20:88:e2:c0:84:e5:3c:75:5f:33:61:97:
4c:19:d3:05:7a:f2:c4:b4:14:63:a4:e7:a8:b4:07:
4d:27:54:72:10:5c:32:a2:d6:fb:99:ec:16:bc:c6:
e1:db:97:ba:30:d7:1c:8f:d9:e9:fe:2f:ee:97:b1:
a6:e7:fb:b7:d6:cd:cd:19:2a:71:5c:58:a6:14:fc:
80:b9:f2:4d:40:1e:ff:69:04:45:51:1a:ca:ba:71:
aa:ee:07:68:80:c9:1f:6a:cb:57:a1:c3:cc:b4:36:
7f:fe:78:dc:db:ca:21:0f:4c:2c:64:cc:15:a4:2e:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:FD:10:12:3D:C4:6A:0E:EA:1E:1F:13:CB:89:D5:0C:44:6D:F1
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7d:c1:ab:ce:39:7e:93:b6:97:2d:84:7b:81:de:a3:75:a4:
21:3f:b3:d6:dc:2f:a9:d9:2e:fb:ca:aa:85:45:48:44:e0:3d:
22:06:44:50:c4:a0:b4:e7:b1:88:05:f4:d6:d7:e3:9b:58:04:
3e:f7:b9:21:1c:d8:14:a5:68:b4:dd:40:42:d2:da:74:00:60:
7b:bd:66:70:11:00:50:12:28:cb:50:97:87:8b:39:da:7a:f0:
54:fd:f3:fd:b9:3d:33:54:cf:e6:26:bc:d2:1a:72:d2:73:84:
f7:5c:eb:4e:65:74:95:66:a4:75:58:6a:c5:d6:0b:66:c1:b4:
ed:56:e5:59:de:b8:a6:24:da:57:71:f4:ce:8a:21:ad:2a:23:
98:47:46:a5:e1:0e:99:d2:2e:fb:f0:d0:00:7c:88:41:36:0c:
1a:82:0c:57:d9:30:be:af:d2:3b:7a:f8:5d:59:94:a3:08:a0:
34:94:f1:c7:ee:48:f8:01:1b:03:6f:30:78:83:7c:04:a0:d1:
f7:81:3b:27:7b:9a:2a:47:2d:d0:3f:89:cc:cc:88:b6:6b:df:
72:0e:41:bb:d3:6a:d2:66:80:fa:d6:ff:e7:47:00:36:f2:aa:
64:c6:18:c2:80:d2:3f:fe:59:15:a4:2e:c0:b8:8e:da:3d:fd:
bf:1d:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:21 2025 by rpki-client