Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json)
Hash identifier: Jua4MxEQ1m8+FiLgG5SlF80hNA1RoGGpbh5ijHsRGl0=
Subject key identifier: CE:52:2F:B1:2F:54:41:05:A0:F7:FC:6A:66:64:C3:39:B3:10:68:3D
Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Certificate serial: 0198D47334A2121687872B7825259C814CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
Manifest number: 1643
Signing time: Sat 23 Aug 2025 01:02:56 +0000
Manifest this update: Sat 23 Aug 2025 01:02:56 +0000
Manifest next update: Sun 24 Aug 2025 01:02:56 +0000
Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: gq9p2NLnGWmmW9B4Byhtufw1CphrkU9vy7Sav1XTIKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:34:a2:12:16:87:87:2b:78:25:25:9c:81:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Validity
Not Before: Aug 23 01:02:56 2025 GMT
Not After : Aug 24 01:02:56 2025 GMT
Subject: CN=ce522fb12f544105a0f7fc6a6664c339b310683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:b2:98:d6:85:f3:b6:87:e8:f9:2c:b4:6b:
64:50:ed:33:d5:37:d0:e5:f5:56:7c:e1:ee:7e:8c:
14:87:3b:c0:ba:64:cd:cc:33:94:c9:0d:c4:7b:f2:
38:33:7b:1e:0e:bb:b2:2e:c7:7d:73:6d:7b:f8:20:
40:00:66:58:91:d4:71:4f:c2:30:1f:50:f2:e8:72:
5e:64:b2:61:ca:ba:e4:28:88:f9:65:89:34:b5:99:
8d:b8:6c:73:b1:f8:24:1b:8e:86:93:0f:a2:7f:fe:
5f:f6:d0:15:ce:27:4e:ae:d3:99:5a:6f:80:18:36:
d3:74:56:52:bc:62:f7:84:87:17:ef:e5:ac:5d:0f:
26:f6:6b:a2:75:40:4d:d1:f8:25:33:af:d7:c3:77:
75:cc:77:79:a4:67:c2:1d:1d:9b:41:29:a7:78:af:
73:3d:36:b3:f8:17:51:44:56:af:5d:04:63:0c:44:
8c:74:40:cb:b0:1c:9a:cd:26:3e:53:12:8a:2f:27:
a4:85:24:e8:12:76:18:69:99:de:89:67:1e:d6:51:
6a:93:c7:e3:0f:60:69:79:a4:01:a9:0f:7f:3f:84:
71:90:c5:f4:0a:9e:ec:d1:4c:6f:1e:05:d8:fa:89:
a1:62:5b:3f:a8:dd:77:56:4b:df:38:56:39:27:dc:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:2F:B1:2F:54:41:05:A0:F7:FC:6A:66:64:C3:39:B3:10:68:3D
X509v3 Authority Key Identifier:
keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2f:9f:f3:de:30:bc:17:a1:8e:eb:2a:ac:bb:2d:8c:15:65:
2e:1e:5f:e6:a9:42:0f:cd:02:e6:18:bd:c7:8b:d6:5c:56:a3:
34:7b:ea:d8:54:16:e2:5e:c5:0d:f4:a4:30:2f:80:6d:b9:93:
40:7d:fa:4a:0b:70:4f:76:5f:39:fa:88:d0:48:09:dc:72:ad:
34:84:bd:0a:47:27:d7:cb:b2:e9:60:35:9e:80:71:8c:c7:5f:
cf:22:14:89:79:3e:bd:d2:8c:68:a9:0a:41:b3:a4:24:e6:43:
6b:3b:07:47:d8:5a:8f:ea:d9:34:53:b5:7e:be:9e:d3:4f:64:
14:fc:7f:17:22:3f:4e:42:a1:da:b4:05:3d:74:1b:f0:eb:98:
e6:2c:c5:23:63:fe:64:5c:1d:f0:2d:60:ba:60:7f:06:ae:72:
b2:62:c0:94:2a:8d:85:9f:dc:fe:8c:99:5e:12:7e:1a:07:ed:
b0:01:1a:d3:12:ba:10:ce:55:19:2a:52:8f:c2:1f:b7:e7:cc:
2a:7d:7c:39:35:94:90:28:7f:bf:0a:f7:02:86:61:c5:15:dc:
b9:33:98:dc:fc:66:ef:97:f2:76:72:3a:1f:68:9e:0d:8e:ec:
a5:b6:08:d0:77:02:21:9d:56:59:9a:aa:c6:81:12:da:5a:a7:
61:69:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:05 2025 by rpki-client