Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier: GoMvfZw52cJEuJMxN4TUTjbS7NjaeWNyVr/moE0IbjY=
Subject key identifier: 99:A3:76:F6:97:36:0E:6F:E0:A2:93:3E:4B:C3:07:A9:0B:B3:82:2F
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer: /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial: 0198D65F1D80D6FC47666EE3E09EDD120787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: IxKHa9T3YS9bR79LSqAa8YQwIoavQP3VYizEjjkIUdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1d:80:d6:fc:47:66:6e:e3:e0:9e:dd:12:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=99a376f697360e6fe0a2933e4bc307a90bb3822f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:b5:92:80:ca:63:56:63:d1:02:f5:7f:bd:
b6:57:69:da:21:55:b3:40:9c:7d:f7:9d:77:c3:45:
1b:23:da:30:00:7e:b3:bd:ce:6d:37:37:b6:e9:b1:
12:4f:86:64:ca:71:7a:60:d0:8d:25:8f:9d:df:8d:
88:54:10:d4:4f:83:07:3b:8e:83:26:71:1a:51:ab:
06:1d:ea:2e:d6:36:53:45:98:a7:a5:ac:5b:4d:e4:
25:cb:50:84:d7:86:7e:8a:05:6f:d5:c1:aa:b7:cd:
0a:a2:f3:bb:df:b8:45:cc:4f:ec:ac:9f:40:ea:61:
e0:01:6a:c0:06:67:8b:ed:64:5b:44:61:48:b4:9c:
08:f1:eb:cc:82:ed:f9:47:6d:92:af:66:64:ce:c8:
da:25:37:20:7a:48:38:b4:3f:4e:db:58:f8:42:56:
4c:f4:b7:09:93:1f:5a:dd:95:2c:82:34:20:99:15:
92:ee:68:e2:62:3a:53:ff:03:8f:de:81:7a:ad:fb:
5d:73:6d:b8:9a:1b:6e:59:a3:0a:f4:0b:44:17:53:
15:f9:50:cd:e9:97:05:06:d7:71:b0:e4:89:c9:a9:
95:66:26:a0:2b:d0:47:f1:61:32:70:48:1f:29:62:
89:90:6c:bf:0d:79:dc:37:41:90:36:99:1e:b2:f7:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:76:F6:97:36:0E:6F:E0:A2:93:3E:4B:C3:07:A9:0B:B3:82:2F
X509v3 Authority Key Identifier:
keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:38:09:d5:30:02:d9:80:ac:0a:f8:7e:8b:28:33:e2:7a:
3c:aa:80:55:df:9b:80:46:a2:a7:88:bc:77:56:a3:07:58:a3:
78:c3:5b:dc:f2:32:3c:25:0d:73:70:a7:78:97:73:10:87:ea:
7e:f7:e6:40:59:75:0e:aa:99:3c:00:84:6f:15:fa:3a:1e:a5:
fb:09:50:83:14:43:be:bf:96:c5:ce:43:55:63:97:c7:3d:45:
c8:25:3f:cf:cb:e6:43:dc:d0:f1:6b:df:64:08:71:a4:e7:08:
2a:c4:d3:b0:c6:80:17:c4:ed:3e:b8:c6:26:b2:8b:95:f8:85:
58:1b:bc:5f:3e:98:dd:e7:ad:71:ce:a7:98:4c:73:ef:94:c8:
71:01:83:51:e8:24:8f:58:1a:ad:23:db:14:f3:ce:1f:d0:a5:
a5:94:bd:e4:ba:29:c8:73:6b:06:fd:21:4f:a9:8c:e8:6f:ab:
06:4b:3f:e1:1e:5d:21:e9:ed:e9:13:05:8f:a8:f9:d6:27:16:
bf:33:d6:c2:49:03:0d:b1:ee:2f:05:fb:40:26:7e:20:fa:ef:
23:54:1c:96:a2:50:b7:c3:f9:76:91:6b:7a:b0:7a:52:0b:f7:
44:e0:4c:9e:19:fe:b6:1f:13:c1:72:41:d6:a0:b8:9e:64:00:
ce:a1:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:32 2025 by rpki-client