Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: wcNmEiFL0PvDE/zRPBdCccj7TMsBzCEQT0XuxFpoEGQ=
Subject key identifier: 6A:1C:4D:6B:87:0A:00:6C:AC:F2:7D:56:4B:8C:FA:EA:11:91:1D:51
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 0198D6CDA90343600DE0B177AF3E0B33CBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1369
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: sio1mJO/+rcxCpiRCSORc70aTVb6/Y+BetreHqL+61g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a9:03:43:60:0d:e0:b1:77:af:3e:0b:33:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=6a1c4d6b870a006cacf27d564b8cfaea11911d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:e8:31:54:2e:8f:a6:80:e1:31:39:30:99:
69:1a:f1:76:45:f5:96:ba:6e:16:a9:23:0e:a4:51:
4e:94:99:e4:e6:c4:b5:8e:5e:0e:ac:1a:7d:b4:ab:
92:09:92:5a:e8:5b:c1:6c:cd:80:46:82:13:7a:23:
1e:86:e5:6d:81:27:96:b3:f7:8a:ef:f0:33:29:a6:
ed:e2:63:5f:3c:05:5a:0c:72:76:30:3e:6a:68:a0:
66:19:a0:86:14:08:e0:ee:c4:57:6f:b5:e4:93:86:
5e:6d:5d:72:01:b1:49:1c:be:85:58:e6:a1:5d:df:
5e:40:94:1b:5e:a6:74:b7:8d:63:a1:ea:f7:23:df:
52:da:b7:ae:0f:e3:0c:a0:1d:cf:03:7b:c5:00:24:
ae:64:05:4e:17:d2:d9:5d:23:52:a9:b8:94:43:c5:
c6:d5:fe:8f:15:ab:10:88:26:1a:6a:11:0d:b0:9d:
94:15:28:09:85:3f:fa:00:8b:a6:53:b1:50:73:47:
45:50:fb:92:1c:76:f2:2c:83:9e:c2:65:be:ce:f9:
36:95:d0:1d:ac:43:2f:f2:90:42:4d:1f:47:6d:64:
bc:11:04:28:0d:0f:07:b6:53:fb:40:b2:b7:3b:c8:
bc:c6:61:27:22:a9:e3:26:df:c4:db:5d:42:fb:d3:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:4D:6B:87:0A:00:6C:AC:F2:7D:56:4B:8C:FA:EA:11:91:1D:51
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:04:a8:2c:53:27:79:53:3e:de:c4:52:09:84:e8:75:65:08:
aa:32:74:1a:9c:3f:f4:8b:18:69:fb:60:df:b5:51:d2:94:3b:
39:fa:19:f5:cf:7e:ca:bd:02:07:79:1e:93:91:48:2a:f9:46:
a3:02:72:f1:aa:3e:52:eb:4d:d1:3e:2b:0d:42:a0:55:03:ae:
cf:8a:33:4c:0f:f2:72:47:2b:c4:a9:36:4d:a6:06:dc:37:08:
47:37:2e:3b:87:99:7e:dd:ee:d0:97:8e:9c:bb:27:38:a4:a0:
2c:bb:a1:1a:6c:9a:21:2d:df:49:ab:2d:32:44:2f:e0:9d:30:
f5:d8:aa:19:72:55:27:82:04:cc:2e:0d:a6:31:6e:b8:ab:56:
14:a1:71:79:f7:96:a3:62:ea:17:0a:81:00:53:92:d1:9f:c5:
b3:cb:62:b4:43:db:fa:74:da:74:d7:db:43:e5:cd:30:ef:71:
81:0a:82:9e:a5:1b:66:4d:0d:e8:c5:51:da:0e:28:f4:3d:52:
37:97:06:d3:f2:be:02:91:5e:c5:40:1a:57:88:52:f6:ab:e8:
71:81:3d:a3:64:76:de:49:78:fe:41:06:9f:1b:97:ae:d0:39:
d9:b3:33:5d:ee:e3:34:1c:5e:78:a6:f2:38:94:e6:46:a2:79:
df:5b:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:02 2025 by rpki-client