Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: yArVdwpVbnIhMy3JBYSmfEV0rho70Q/qXAk2+vvthqg=
Subject key identifier: CA:1A:3C:07:9C:6B:90:09:7E:53:69:E1:26:A3:C5:E2:C7:E8:F7:F8
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 0198D5BBCD4C556F63CF168D8A484B1CCE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0C9E
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: u0TsfCj+WN76jKlt65/+o7/9mK9+WeTUpdNKxxDb22Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:4c:55:6f:63:cf:16:8d:8a:48:4b:1c:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=ca1a3c079c6b90097e5369e126a3c5e2c7e8f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:5f:41:2b:f1:62:c7:16:50:f6:0a:ea:07:
84:dc:0f:10:c1:d9:22:92:04:32:3b:ff:5f:c6:f6:
6d:43:8a:73:60:d3:6c:d2:5e:71:60:f6:04:b1:88:
6d:0f:0f:5f:1d:a7:61:53:87:05:32:a7:06:50:79:
dd:b4:1c:4a:fc:ba:5b:e7:69:9a:97:cb:77:14:8f:
ca:e2:d8:d9:d6:68:81:49:46:0d:3e:ac:9c:91:58:
60:36:cd:dc:56:7f:ec:30:d5:b2:d5:c0:77:8c:28:
1d:e3:07:5d:77:2c:11:17:98:88:07:ac:58:00:f9:
86:7b:d3:0e:4c:78:f2:b0:c7:39:0f:1d:fa:59:72:
86:32:e7:14:95:5c:5d:7e:a0:83:b8:87:78:1a:ee:
47:e9:ef:8b:46:67:ed:f7:ca:65:ec:25:f6:d9:42:
25:06:c0:30:51:f8:da:1f:4b:84:76:5f:31:01:c0:
fd:f9:d6:05:b5:6b:2d:c0:b7:67:0c:a1:57:7c:68:
8c:10:7d:41:29:cc:c2:65:1f:3c:75:da:97:6e:61:
08:fa:17:80:06:86:5d:67:1a:d9:b5:8d:4d:54:ae:
db:80:03:9d:78:f6:67:41:07:6d:e2:4b:c8:dc:26:
70:ed:05:bb:97:07:cf:00:4f:19:9c:80:67:01:13:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:3C:07:9C:6B:90:09:7E:53:69:E1:26:A3:C5:E2:C7:E8:F7:F8
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:64:da:0e:f8:71:ce:c0:31:c8:08:e8:ea:d8:d1:ff:40:
88:ef:ad:dc:f7:eb:8b:27:f6:92:4d:84:78:57:a1:ad:31:d0:
27:af:b6:3b:01:46:6f:91:92:84:ec:2a:89:02:2e:ad:19:31:
ec:06:e5:6d:a9:66:e0:37:9a:1d:27:dd:a2:09:6a:37:99:33:
4f:ce:b1:39:58:9e:0e:91:7f:d3:d7:7d:04:03:65:97:aa:ca:
72:eb:12:d3:a8:57:e8:4f:d9:ba:b2:4f:6d:b6:37:38:30:4e:
42:b4:22:2a:6e:88:6d:d4:f5:4d:dc:7e:41:08:6c:5d:a7:3f:
b6:fc:46:03:62:91:f5:a6:a8:4e:59:4e:c7:c5:50:4b:6b:f0:
e8:7b:24:99:82:0f:c5:12:1b:65:0f:af:71:d3:4a:65:4c:97:
38:c5:74:a5:b9:18:54:8d:7c:1d:77:db:96:29:7f:6a:e6:16:
82:41:54:a5:af:c1:a3:3f:b7:68:b1:39:b9:29:61:0f:5d:54:
a6:42:55:79:fb:5b:4b:ca:03:4d:a9:8c:86:bd:84:fc:e9:9d:
29:d6:ed:88:a5:ea:ad:f3:3e:10:fa:91:86:c0:b9:9f:15:84:
ae:db:a4:38:43:1d:29:5c:ab:d8:47:d1:32:02:27:f4:9a:9a:
75:44:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:28 2025 by rpki-client