Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: re6wXF5QRuzehhDVuQKmdA6h1sk6rO036xGMs4sgGXg=
Subject key identifier: CE:20:CA:75:5B:0A:C3:38:69:12:A4:AA:1B:74:02:6A:05:21:E1:60
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 0198D4DFE552E850E0837BE0D8BC83B4D243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0B7E
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: k0CREbz2w3fs43Uq5FKf1tP3CaN1nKauyN4FWyZS2eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e5:52:e8:50:e0:83:7b:e0:d8:bc:83:b4:d2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=ce20ca755b0ac3386912a4aa1b74026a0521e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:af:50:fd:35:12:4a:0d:d5:2a:27:92:44:
f6:a4:81:ef:58:7d:26:7e:ad:dd:aa:eb:e0:70:e7:
5b:cf:9e:c6:1a:7a:b1:a7:b3:53:ad:5e:6d:66:71:
88:b2:59:aa:5c:51:93:50:d8:2f:58:2e:45:c4:83:
b2:05:eb:27:a6:b1:4b:dd:b0:b8:60:f7:0a:54:75:
4c:51:03:84:83:86:5e:7d:1d:c2:90:bc:a2:0b:a8:
03:b4:61:e7:d5:ef:9d:81:87:57:d1:fb:7f:9b:e6:
76:13:56:b1:dc:7c:8e:3a:cc:1e:b9:77:40:db:b6:
92:fd:97:ad:e6:df:88:ac:9d:02:65:1a:47:00:63:
d3:16:dd:23:75:6d:8e:e3:fe:48:fc:e4:16:59:7b:
63:ce:24:fd:0c:6c:bb:a5:da:67:50:cb:6b:80:5e:
cd:d4:e1:5e:8a:bb:50:f2:76:21:a0:31:3e:e3:91:
33:d4:ec:f4:7d:28:16:6a:16:cf:39:a4:2b:07:2c:
1e:bf:f9:09:56:5b:95:25:26:89:3b:6b:7c:c1:06:
b7:59:14:57:8b:bd:65:07:23:33:97:5e:e8:ae:cb:
ee:c9:5f:36:90:68:6e:9b:0a:f4:05:73:a4:87:90:
08:15:bc:a7:17:22:1e:05:17:9b:e5:99:d7:48:3c:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:CA:75:5B:0A:C3:38:69:12:A4:AA:1B:74:02:6A:05:21:E1:60
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:a7:5e:32:1e:19:66:7c:58:74:b6:74:ed:f5:0a:95:04:
8e:f0:ea:31:d9:f6:5c:7e:cc:1c:f8:79:54:d3:72:05:39:6f:
b1:68:06:7f:31:f6:06:f2:3d:f8:f3:81:d3:d2:68:92:24:8c:
c7:fa:dc:10:9f:51:83:2a:0e:a9:91:8e:f8:b7:b3:fb:89:49:
7c:75:2e:0b:c5:c0:e9:69:c6:3e:ec:b8:48:61:a6:4b:43:07:
cd:b6:46:45:fd:38:06:6e:e0:6d:8d:43:12:49:1e:49:bd:ef:
81:ac:bd:fd:fb:5d:03:52:b0:48:7e:e1:d6:2f:03:84:7c:e9:
a3:92:07:2c:95:be:19:19:80:4a:45:05:e1:50:35:41:e6:39:
b6:b6:b1:48:ff:89:37:eb:c7:8b:57:14:66:d0:05:36:c5:e9:
09:72:c3:4b:a4:15:b4:0f:e4:04:a5:19:93:3f:fb:e5:1b:d5:
53:b8:09:72:88:91:5d:b3:5a:ce:21:7b:dd:fc:cd:72:50:97:
87:fa:3f:6b:29:06:22:72:64:ba:3f:93:7e:da:f3:6e:8e:10:
73:63:82:16:ae:5e:9e:87:b2:a7:7e:d6:cd:4d:e1:a2:c4:53:
53:73:64:85:ba:b4:29:6a:db:2c:03:6f:de:1a:a1:ae:39:78:
39:6b:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:28 2025 by rpki-client