Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: zKvEdPFf49ga9WQF5PEeytvDvGCWeFnVYWL6vxTKJYY=
Subject key identifier: A8:49:67:8F:93:9B:43:13:40:30:75:F9:4C:CE:B2:72:40:D2:17:F9
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 0197CB39E65786461F232ADBF3041CD82245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 12FD
Signing time: Wed 02 Jul 2025 13:00:58 +0000
Manifest this update: Wed 02 Jul 2025 13:00:58 +0000
Manifest next update: Thu 03 Jul 2025 13:00:58 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: pag1/3IQRsHLlBehV9l4cUiOAfKH9udjdnaQxJziokc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:e6:57:86:46:1f:23:2a:db:f3:04:1c:d8:22:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Jul 2 13:00:58 2025 GMT
Not After : Jul 3 13:00:58 2025 GMT
Subject: CN=a849678f939b4313403075f94cceb27240d217f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:d0:ce:8c:67:55:fc:fd:6c:e2:9c:8c:c9:
0b:53:71:ed:62:5f:0d:02:32:03:69:47:2f:97:ba:
76:69:df:15:12:8b:b2:4d:89:b4:f4:cd:57:bd:d2:
ce:f7:b1:54:fd:4c:da:ee:2b:96:d7:26:9a:25:aa:
6e:d5:82:84:35:35:94:12:74:0e:94:22:92:ff:c5:
8d:96:21:81:73:4e:9c:5b:b8:b4:81:80:2e:51:73:
fa:c7:f7:80:5f:46:a7:76:a5:f6:30:57:90:9b:5e:
f8:e7:94:b9:8f:00:6e:b9:8d:10:f0:5b:72:c2:4b:
c3:64:45:43:15:7b:59:fc:33:c3:a5:7d:04:7f:9d:
cf:12:31:50:42:41:68:89:60:55:32:49:67:15:db:
86:55:21:52:8e:c6:9e:92:83:17:4e:1c:a3:2e:b0:
76:8c:84:f1:55:4d:e8:b9:3e:83:4a:bf:64:19:e9:
fb:46:30:48:30:11:d7:db:9c:be:28:fc:92:a4:3b:
e9:b5:5e:d2:58:6c:4f:c8:36:c5:b6:b3:7a:8f:e2:
01:1c:06:58:0c:fc:ad:ee:2b:79:47:87:7e:ec:d7:
a1:03:cb:c3:c5:cf:5a:5e:f9:c0:91:b4:fb:9d:09:
ef:c0:0d:6a:65:b0:cd:e6:a9:0a:84:8d:32:8e:9d:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:67:8F:93:9B:43:13:40:30:75:F9:4C:CE:B2:72:40:D2:17:F9
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3f:b9:2f:6b:97:c0:c0:2f:f1:45:ed:66:61:4a:cc:31:6b:
8e:a6:93:6c:a0:13:db:0b:97:f7:6b:55:70:fa:38:41:98:61:
5c:ee:88:9c:28:59:f0:13:1e:5f:84:83:72:12:10:a7:dc:0a:
c5:cd:49:c3:5f:c2:ef:49:b4:4e:5b:cb:ee:92:b1:ab:4f:01:
bc:77:32:08:a0:5e:d1:39:14:83:56:05:a5:d1:cd:e9:f5:3c:
8d:2f:a1:16:41:fc:e0:d3:5a:be:bd:40:79:b1:34:00:6b:0a:
69:56:be:8e:09:77:ce:31:b7:06:ad:67:4f:13:d6:d7:0f:35:
42:fc:3a:dd:b7:14:41:e2:b0:e6:02:8b:44:4e:0c:98:a6:84:
38:73:c9:10:78:67:f6:22:4a:fd:ab:b3:12:bc:ce:18:69:6a:
62:2b:f5:49:e3:15:68:f2:ca:c6:1a:e6:5c:83:9f:55:88:45:
c1:64:55:a7:90:ba:10:b9:01:8f:28:30:2a:d3:fc:16:93:6c:
a3:a9:1b:16:bc:89:f2:03:11:df:64:1b:3d:b8:99:f1:d2:bb:
17:e7:e7:0f:5c:92:38:db:61:8d:16:58:d1:63:99:9a:6a:dd:
24:cf:56:17:29:4f:43:59:c2:4f:50:22:de:39:3f:c6:42:bc:
af:9c:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:24:17 2025 by rpki-client