Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: vk1LesdAweJ4ITmFsWARpHsYdf3ppEX5J54hGT7KlKQ=
Subject key identifier: BC:F2:B4:C6:00:15:54:D0:CA:02:EE:C9:D1:0F:2C:84:0E:BC:F8:55
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 0198D6610BF6549B34988F4D706F43CE326C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 1042
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: 4Jfr0/k9nIJQz5LB6BGVQaTKcep3qIu4okLt4AcyhrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0b:f6:54:9b:34:98:8f:4d:70:6f:43:ce:32:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=bcf2b4c6001554d0ca02eec9d10f2c840ebcf855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:77:82:93:99:42:2b:8a:b4:07:87:9a:02:
c0:8d:d1:09:e6:4c:94:eb:eb:e9:32:b4:72:45:23:
73:8f:8b:06:10:c7:21:30:6a:ad:69:1f:c9:41:b2:
da:da:ff:d3:f5:f2:ab:e6:1a:66:23:61:f3:cf:c6:
db:ed:43:7d:2d:e8:67:80:9e:9d:79:4b:8a:36:3c:
94:ec:c2:d6:e6:5d:d1:14:a9:34:63:01:3c:96:a4:
f7:be:b1:4b:60:09:93:3d:17:d8:0a:65:0e:6f:e7:
58:11:b7:df:4f:97:e3:2c:20:34:7e:09:70:12:af:
7f:69:ed:76:ba:8d:2d:d0:d5:99:21:9a:e9:ea:f9:
c4:61:fc:02:09:d9:39:c3:cd:26:63:34:f0:d1:37:
8c:bf:17:f5:a8:88:59:a6:c2:d4:91:fc:a3:5c:24:
c9:4e:6c:65:40:6d:fe:bc:4c:9a:42:db:08:d4:a6:
ba:5a:0d:72:77:5f:94:90:80:45:62:91:e7:c7:df:
26:49:56:d1:85:75:cc:0d:a5:5e:a0:72:1e:b5:88:
76:e4:b0:a8:95:17:75:cd:a9:a4:b2:15:31:98:7a:
dd:27:b4:3e:76:0e:98:5a:08:e2:9f:6a:f9:be:ce:
54:c2:90:8e:a0:a3:2d:e8:49:d4:18:bf:43:56:27:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:B4:C6:00:15:54:D0:CA:02:EE:C9:D1:0F:2C:84:0E:BC:F8:55
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1f:01:56:30:df:5d:e5:00:46:86:7c:0f:de:29:d7:8d:a9:
a6:8d:4b:62:b7:d1:5a:1f:78:26:03:d4:91:83:26:d4:2a:91:
56:2e:80:f7:54:f3:6f:ba:32:b5:57:c2:27:6b:fb:12:7a:ea:
78:b0:79:00:dc:60:2a:20:c5:fd:33:0f:20:67:11:18:df:5a:
9f:ba:0c:b9:48:60:55:12:7e:4f:38:64:12:09:33:2b:62:a2:
3b:12:a0:4e:b6:e6:24:90:b3:6b:d1:89:2f:57:3d:4b:fb:b5:
23:2c:59:2e:fe:f5:d2:b7:04:05:4a:0e:3b:c4:bf:82:b4:4b:
ee:e6:7c:43:ca:e6:56:ac:07:0c:6e:bd:5a:ce:ba:ac:fc:0e:
f7:26:a8:00:ff:ad:6e:49:3d:4b:69:25:8d:14:4d:47:45:0f:
c0:13:cf:aa:0e:1a:47:dc:df:53:72:08:db:7b:b9:77:4b:50:
46:d4:a1:4e:dd:f8:af:37:c9:91:df:3f:57:53:a5:32:26:cb:
56:18:e2:14:f1:fc:fb:f0:27:bc:b0:7b:01:95:19:a5:9b:60:
83:ce:43:5c:de:85:2c:6c:e9:39:b3:56:d3:66:3d:90:f9:e4:
2e:45:76:4e:a8:10:a2:a3:12:fc:2a:7a:b9:72:4a:bc:12:09:
b9:de:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:48 2025 by rpki-client