Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: AXJbJSJZxOSL70iyw+UbX61eqPhmPX++jjLUlVJePs0=
Subject key identifier: C0:EB:B9:BD:CB:80:03:4D:3D:1B:22:50:E4:88:49:FA:66:B1:A6:98
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 0198D73B1E017D3B18CD9CE074114686C78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 1455
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: aQ93WAZ/YoFjPO+Pz6Rj3JEBLgTDeZpUxxymydetRz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:1e:01:7d:3b:18:cd:9c:e0:74:11:46:86:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=c0ebb9bdcb80034d3d1b2250e48849fa66b1a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:2a:2a:b9:db:7f:12:f7:63:1d:53:05:e6:
c2:7b:85:5f:1a:52:7b:f1:0d:f0:76:f6:86:85:6f:
e7:df:51:48:eb:62:15:90:91:f5:3f:41:26:3a:ac:
11:25:73:8b:29:e4:43:b1:8d:c2:d5:9c:85:fd:fc:
f0:52:15:ee:ab:e3:70:d9:d6:c8:2c:72:7d:d5:36:
cf:4d:69:2c:0e:0e:0a:86:4e:e9:65:7d:6c:e2:f5:
ae:84:82:33:e7:dd:2d:15:11:07:37:24:33:6f:49:
2b:c1:96:25:c1:9a:43:d4:a7:57:2a:02:2d:1c:78:
20:34:8a:90:1b:8c:44:37:85:1a:50:5e:04:2c:82:
82:ff:09:46:11:96:e9:0c:60:ab:e1:58:4f:ef:aa:
d0:36:3a:5f:97:a4:a4:93:36:d2:84:6f:74:59:5b:
9c:4c:6e:f1:37:79:72:8f:10:98:0b:1e:c9:7f:69:
e9:0a:de:56:45:e4:3d:59:46:88:9f:98:c9:5a:43:
a2:73:40:32:db:37:be:77:98:5c:8b:1e:27:3d:a0:
0c:81:c0:22:bf:94:d7:0b:5d:50:43:14:55:18:60:
34:9c:aa:ca:cb:9d:10:d2:bc:ba:97:58:23:83:42:
cd:20:20:6b:e7:14:6c:4e:82:cc:c1:b6:6d:c0:a8:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:B9:BD:CB:80:03:4D:3D:1B:22:50:E4:88:49:FA:66:B1:A6:98
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:31:26:f4:73:98:8a:d0:9f:d5:14:6b:16:1a:13:eb:58:
12:e2:ee:1e:51:6b:d5:e4:b9:79:cd:58:32:35:cf:80:2c:18:
25:a3:b1:de:f2:4f:92:1c:07:0f:35:6a:69:d0:20:93:36:77:
9d:bb:a6:c3:b4:71:b8:08:db:7e:d8:67:92:b1:9c:65:46:4c:
3d:12:a7:9e:85:95:35:a3:5d:48:f4:83:02:4b:7a:a1:87:c3:
92:51:ac:96:40:d2:88:a4:be:e9:0f:f1:8c:24:86:90:88:17:
24:51:e8:b1:99:ba:81:38:79:92:43:e6:8b:a4:f6:68:ff:5a:
1e:cc:d1:a1:8d:9e:43:91:6b:f1:f4:61:b1:90:6b:67:5f:6e:
4a:6c:21:26:9f:5c:ed:7f:66:01:bd:77:f0:43:29:1f:e0:62:
63:5a:2e:ea:5d:57:8e:3e:5c:4a:7d:70:b4:dc:52:2f:7a:d5:
66:ac:44:aa:ea:5a:5b:b4:fd:4f:5d:6a:69:89:63:ae:00:55:
42:ba:f4:69:e4:c9:ac:9e:06:1b:da:52:c3:8d:23:2a:2a:d2:
28:89:73:08:0b:31:21:96:b6:47:e4:db:0a:a7:97:76:b6:5f:
c6:82:d1:94:d4:80:c6:a3:97:84:88:2b:c1:0b:d4:a9:d3:64:
92:ed:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:19 2025 by rpki-client