Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: Uk+CEsMYVf4iKU67aiiKGwJdieRaguk0BIfNzZhoP3A=
Subject key identifier: C6:D8:FF:70:CE:C2:05:25:7A:04:05:46:75:67:BD:CE:C5:F5:AB:A9
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0197C426A451A476C500CDE618DF0E9F77FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 0295
Signing time: Tue 01 Jul 2025 04:02:35 +0000
Manifest this update: Tue 01 Jul 2025 04:02:35 +0000
Manifest next update: Wed 02 Jul 2025 04:02:35 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: /VXPp+m30d1Be5kXs14BqtQmSVIlzQfEAZ+ZPl/ZH9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:a4:51:a4:76:c5:00:cd:e6:18:df:0e:9f:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Jul 1 04:02:35 2025 GMT
Not After : Jul 2 04:02:35 2025 GMT
Subject: CN=c6d8ff70cec205257a0405467567bdcec5f5aba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:3a:9c:8a:55:f4:ac:b8:c4:01:9b:f5:ac:
62:fb:19:7b:b7:ca:3c:c5:2b:3f:39:28:3f:ca:0e:
d1:d9:32:4c:3f:1f:66:b1:e9:cd:ac:6d:d6:91:05:
5c:9c:27:30:db:85:07:7d:c2:0e:23:42:d9:7e:d6:
9f:24:36:55:55:bd:ed:a4:42:27:7c:30:07:5f:f8:
d0:28:46:38:5f:b6:a6:33:0f:d8:47:ae:cc:d9:b1:
ea:63:4b:e0:a0:5c:85:81:c0:07:e7:af:f9:84:4a:
6a:1e:49:4f:03:0d:b8:56:0a:2c:a0:04:0f:f3:00:
d2:04:a2:52:96:17:96:30:50:9d:b7:52:39:7d:0f:
a9:f4:c2:76:d9:3f:ac:e6:cd:2b:7d:0c:11:df:7a:
36:45:28:07:71:dc:7f:78:09:34:d8:d9:c0:b2:76:
2d:cd:7a:71:2d:d7:33:c0:c8:cd:a3:9c:23:0d:5b:
c8:b6:06:63:41:be:35:3d:26:63:ad:d5:f1:cc:25:
53:d0:71:ee:ee:95:a4:7a:3f:3a:11:1f:ac:a1:61:
80:25:2a:d7:be:5b:62:3c:d7:b5:70:98:01:3a:f0:
f5:85:69:27:1e:a4:24:4b:ed:2c:f2:b3:49:48:ac:
bf:71:b0:1d:2c:61:88:73:63:07:4a:ef:84:75:02:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:FF:70:CE:C2:05:25:7A:04:05:46:75:67:BD:CE:C5:F5:AB:A9
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:36:85:e2:ee:5a:1d:23:cd:d5:e0:c6:89:65:e4:24:77:
05:12:27:1d:0d:28:8a:a8:f4:d8:d1:cb:01:53:6f:93:cb:26:
e6:5d:5f:8f:f2:8f:c0:69:61:ad:1d:08:8d:61:0f:91:42:cd:
a8:33:a1:89:01:2b:55:6c:d8:d4:a8:2a:95:4f:88:41:39:cb:
e1:9a:f9:a4:d7:26:f5:72:1a:47:20:d1:22:f6:45:1d:c0:3e:
6d:32:05:e6:f5:9c:de:e7:0f:4b:07:7f:74:8e:7d:6f:2f:ce:
ef:f4:50:e2:82:f9:70:32:6a:56:a3:6a:cc:50:98:3d:47:01:
d8:45:43:f0:5f:a5:a8:0f:13:55:7a:01:33:7c:96:6d:ee:ce:
70:fc:d2:bb:2d:ca:59:27:bc:08:69:c2:3f:83:64:e5:11:2c:
ab:ce:81:f7:51:8f:3d:18:17:15:fe:a2:38:ac:37:eb:6e:54:
20:9a:98:09:2c:5f:7f:42:44:5e:59:d4:88:8f:99:8c:b1:1e:
f7:e3:22:fd:12:d4:1a:14:3c:c1:a6:78:8a:81:75:53:2c:3d:
aa:7f:0a:08:a1:0b:f7:de:43:c9:96:f8:1b:5a:5f:c1:90:85:
82:b9:76:83:c9:be:c4:fe:82:c9:1d:fa:eb:dd:dd:5a:f8:99:
4b:4d:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:37:20 2025 by rpki-client