Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier: 75kJtyA7fMJW3zs0HkY6XQrKy73RTRma81tinHutBjs=
Subject key identifier: 5A:11:1B:1B:43:18:25:54:54:35:52:9F:CB:3D:51:A5:98:8C:81:A6
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial: 0198D660889987C368F4A7523C338086B716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number: 0AB4
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: ZgPBZQqWT0N9zNFsoZQ0xAOPCxuaK0oSyJmo+D69AKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:88:99:87:c3:68:f4:a7:52:3c:33:80:86:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=5a111b1b431825545435529fcb3d51a5988c81a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:42:6a:59:73:f4:52:e2:9a:15:11:e8:8b:4a:
8a:91:d2:5b:a4:ea:6a:10:ac:7f:ae:30:9c:89:34:
b4:0a:61:27:8d:42:4a:5b:f4:fe:34:94:51:45:4b:
2d:3e:84:ce:78:30:cb:5c:f4:5f:55:26:7c:d5:d3:
c1:6f:a0:3c:c9:61:36:8b:aa:12:fa:2e:c8:d3:91:
34:e5:83:3e:e0:8e:f0:94:93:4b:9b:f9:b1:f8:e9:
fa:91:92:17:b7:14:9f:d4:b5:33:ec:61:46:4f:81:
fa:64:3c:4e:5e:98:b9:ed:50:b6:b4:4b:c8:2f:c1:
59:8d:6b:cf:e8:fd:d7:53:80:e5:a4:fd:ce:70:6b:
f7:30:fb:59:29:bd:1b:f0:74:ae:a8:dd:c9:83:3c:
5a:de:f3:f4:33:98:db:be:c5:a8:ed:7c:38:62:8c:
ab:6f:9b:e0:48:84:53:44:d0:98:cb:61:c9:48:f9:
fb:f7:0c:15:fd:63:2e:b4:c2:83:cd:5e:c6:6c:df:
cc:91:c5:ff:43:ff:3d:55:04:ee:85:ad:80:6c:92:
8b:cc:c5:c0:2f:1e:51:80:f8:8e:ea:8c:81:1a:46:
2f:17:8d:61:29:33:5d:11:99:8b:19:eb:9a:51:d3:
eb:e3:14:87:63:69:fb:f0:f3:00:45:49:05:8f:ab:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:1B:1B:43:18:25:54:54:35:52:9F:CB:3D:51:A5:98:8C:81:A6
X509v3 Authority Key Identifier:
keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3e:b3:01:0e:84:4f:ad:dc:ca:4f:da:56:58:95:4e:02:7d:
ee:1a:bf:9d:64:71:f6:d9:1e:1f:c9:8d:07:49:a0:8c:fc:78:
45:be:d3:68:56:4a:ae:28:24:4f:0d:56:4b:b0:a8:cc:73:58:
39:56:a1:43:b7:ec:57:ce:05:97:95:1a:f8:33:01:38:d7:16:
bf:25:94:aa:cf:ec:40:9e:c2:20:8e:c6:15:fc:af:d9:17:ab:
4f:7b:a5:df:fb:fc:28:71:ef:6b:e4:d0:77:bd:4e:9e:42:c3:
40:ce:cd:6c:ca:28:36:b5:b5:75:bd:5a:ea:19:2f:1b:b8:29:
45:3c:b4:fb:50:1b:6d:6b:90:d9:7a:3b:05:76:2c:76:e8:8b:
f5:99:22:7e:c2:95:b3:0e:73:a5:29:8e:b9:b0:bf:c6:d2:af:
e3:d7:76:4c:e8:64:0e:dd:d6:1b:11:f2:2d:fd:9a:9f:1b:6a:
9a:18:1a:61:9a:b4:4a:2b:46:79:45:28:1a:a7:2c:b5:71:ac:
2c:4b:c2:e2:ac:8a:10:fb:b4:11:c9:5c:45:41:8f:55:b8:c4:
0d:57:43:db:6e:1c:d5:2a:9a:ec:49:09:a8:8a:be:15:a5:e3:
5b:5e:3d:e8:55:d4:c8:0c:02:a4:0b:c9:c2:74:68:8b:74:14:
e3:c5:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:56 2025 by rpki-client