Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: QmFYqOJnd5nsSTs66dgsEGb99xfof5TjEZrHomM33/o=
Subject key identifier: D2:BA:8F:94:81:13:E7:FF:A6:C4:29:75:2D:06:FC:53:09:F1:AD:B5
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 0197C9F04308F8D814A490DC50BE5B090F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: 73
Signing time: Wed 02 Jul 2025 07:00:55 +0000
Manifest this update: Wed 02 Jul 2025 07:00:55 +0000
Manifest next update: Thu 03 Jul 2025 07:00:55 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: iEYsiy1JTjx113a/qVbAWhMkiol/GWIArAQ53lnYvaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:43:08:f8:d8:14:a4:90:dc:50:be:5b:09:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Jul 2 07:00:55 2025 GMT
Not After : Jul 3 07:00:55 2025 GMT
Subject: CN=d2ba8f948113e7ffa6c429752d06fc5309f1adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:7a:9f:9c:f9:71:83:ff:4d:b4:9a:96:bc:
4c:8a:90:69:5c:dc:29:d1:f6:57:39:17:53:cb:da:
da:48:77:24:7a:89:d0:15:cc:18:24:48:22:1d:f1:
b9:0b:97:a5:fd:56:36:eb:6e:14:3f:fb:cf:48:df:
04:27:24:7c:f5:68:b8:4c:6f:93:44:9b:42:be:6f:
20:1e:0d:c6:72:5e:85:d1:95:05:67:2b:b6:c4:eb:
ca:da:9f:33:2f:e1:e4:3f:11:dc:1f:4a:9a:c9:13:
48:24:ea:b5:62:3c:53:11:4e:a5:74:45:12:96:61:
04:e9:93:8a:76:01:ff:f0:dc:9d:fc:57:bf:6a:d1:
d1:a1:b6:47:44:dc:ba:88:c7:65:d1:29:f0:cd:8a:
e8:3a:a7:f6:21:61:a8:68:a4:21:c4:0a:5d:89:35:
ef:82:8a:b7:67:2b:9f:0c:3f:5f:cc:d2:c6:3b:a6:
4e:89:22:51:06:8f:ee:35:e4:10:ba:57:6b:36:57:
cf:62:9e:18:25:f1:48:f1:60:d2:eb:26:54:23:d8:
85:84:65:1a:fe:c8:39:72:79:dc:58:c3:f0:0d:25:
4d:ac:35:c1:7c:b5:07:5b:76:77:08:c5:b5:3f:e1:
4a:70:c6:53:22:ed:5d:b9:9f:e7:65:c6:bc:29:20:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:8F:94:81:13:E7:FF:A6:C4:29:75:2D:06:FC:53:09:F1:AD:B5
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:84:40:8f:48:ad:63:be:2f:ff:19:4c:9b:c3:27:82:7e:
2b:e1:1b:af:d1:99:45:7a:e1:c8:24:f6:6d:24:29:5c:73:c4:
1e:7f:ca:24:b1:d1:a2:68:ed:7e:64:f9:33:8d:c5:43:08:ac:
62:5b:e0:c3:2b:d1:c6:b7:67:ba:d9:c7:c6:0e:14:40:40:9c:
e3:65:c6:8d:59:da:db:f2:dc:b2:c4:34:e0:17:7a:6c:c2:1a:
50:94:81:d9:38:14:76:cd:7c:f5:7b:9d:43:35:51:32:da:47:
2a:06:b4:ca:16:ed:51:a6:23:cc:30:3f:8d:55:b6:ca:aa:b9:
b2:e3:43:a9:e3:0d:7d:a0:23:da:78:eb:98:ba:c1:aa:c1:fb:
e0:60:e5:42:ba:31:8e:b0:a9:c8:c3:b2:b7:51:26:b9:7a:d5:
45:61:3b:61:c6:a6:33:aa:05:dc:8e:1b:c8:6b:a7:a1:80:c4:
95:95:32:48:9d:32:a3:88:76:7f:c3:dc:de:63:31:b7:92:9d:
82:f0:b5:4c:c3:4e:58:44:db:37:74:74:d9:96:f9:8b:f8:c1:
9b:87:9a:ab:dc:4f:94:a5:24:86:65:1c:1e:b3:4f:f0:5b:3e:
e2:9a:5f:a9:41:57:0c:82:f6:1d:08:0b:5f:a3:67:82:40:1b:
05:8e:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:25:52 2025 by rpki-client