Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: yuEunT2MBM0ma1gE5x25u3GR4ifuY0ecrwReXCboxEg=
Subject key identifier: F5:6E:3B:A1:BB:FA:FC:9F:A7:21:02:0F:95:54:AC:C5:0D:C5:99:2C
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 0197BA7E73E075484705AEE93747532C1F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 0FAF
Signing time: Sun 29 Jun 2025 07:02:18 +0000
Manifest this update: Sun 29 Jun 2025 07:02:18 +0000
Manifest next update: Mon 30 Jun 2025 07:02:18 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: o1qK7fK36bb1Tom5RzZ0Qt0nXkt5DOf/bd21hvM72os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:73:e0:75:48:47:05:ae:e9:37:47:53:2c:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Jun 29 07:02:18 2025 GMT
Not After : Jun 30 07:02:18 2025 GMT
Subject: CN=f56e3ba1bbfafc9fa721020f9554acc50dc5992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:bb:fb:9f:fd:a8:f9:1d:5c:96:1a:db:d8:
4d:35:95:ba:27:e0:2f:52:2c:52:56:89:d3:e2:8a:
55:e6:43:ed:35:47:cb:68:ee:44:89:13:62:52:f7:
dd:3d:b6:d8:39:14:98:c4:91:67:1d:a1:f7:e5:1e:
05:69:c9:83:dd:bf:a3:6b:c9:10:61:de:3a:b9:01:
ec:de:f0:4f:48:95:16:50:2f:ba:f2:bb:c2:90:d1:
8c:8e:60:b3:d5:de:24:46:9a:d1:60:ef:e3:8b:5f:
8f:95:3a:a9:17:7b:a7:16:70:22:46:2d:81:dc:14:
eb:0d:9a:3f:8d:9f:7c:e9:67:55:0d:50:c8:2a:8d:
f4:f9:16:2a:12:ba:e4:38:d5:eb:a7:e4:58:21:6a:
f6:c0:dd:09:9c:bc:dc:ec:3c:8d:66:ed:9f:ef:3d:
5d:35:04:8a:d6:b2:08:11:60:cc:8f:c4:31:10:44:
f6:9e:3f:29:da:76:a8:a1:be:7a:ab:f8:79:d6:d4:
30:44:cb:cb:d3:b6:6c:fe:82:5e:34:84:b1:40:28:
5e:e6:4a:b5:b5:30:26:c4:c4:7c:ed:c9:77:ef:62:
8b:22:94:49:a6:a8:2a:61:db:b4:95:6c:03:7c:d6:
ea:0e:7f:a2:ce:3b:66:3a:e7:88:32:eb:20:7c:0c:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:3B:A1:BB:FA:FC:9F:A7:21:02:0F:95:54:AC:C5:0D:C5:99:2C
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1a:f4:a5:03:da:74:d8:19:70:e9:a0:26:24:4b:be:76:c8:
49:19:e7:c5:5f:b3:a1:8f:dc:8b:2a:29:65:ca:2f:24:17:3e:
c7:83:6f:d6:ef:eb:74:4c:48:48:6e:ad:30:b9:a4:2a:52:d4:
53:f4:9b:e0:85:57:7a:3a:2a:94:37:c7:e8:0d:ae:b4:52:06:
d7:74:91:3b:95:0d:fc:c3:8d:0b:f1:f7:1b:ae:8e:5d:b4:3a:
f9:5d:0b:af:62:a5:2b:93:56:75:5c:0c:17:04:56:6d:bb:2b:
06:7f:87:61:55:8a:b3:2c:a6:dc:54:ef:a8:8e:cd:fc:f2:39:
3b:85:54:a8:67:7e:cc:e7:05:e0:51:e5:c1:08:11:54:3f:c3:
c2:30:43:6d:42:7e:1b:ad:74:47:15:91:7c:8d:a3:56:09:d1:
41:53:a7:20:24:66:5d:a7:fc:44:32:83:68:b6:cd:69:2e:a5:
34:06:db:72:eb:ef:8d:17:6f:9f:0c:a7:85:0d:32:e0:b2:e9:
54:34:da:32:d0:b9:fb:ac:1b:2a:9d:2e:8c:dc:fd:9c:88:fb:
4b:d2:be:8d:1f:ca:6a:cc:bc:2d:5a:59:5b:53:b5:b9:e0:8d:
ef:09:76:d3:05:be:21:de:3f:97:e9:9c:01:92:47:8d:47:7e:
81:1e:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:15:20 2025 by rpki-client