Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: zjapNqiqGdfHKEzAw1DtseT7LihapghvHP/2WfEx24g=
Subject key identifier: 92:AE:A3:AA:9A:0D:FF:66:D0:85:28:EE:6C:50:CA:FC:90:3A:04:7D
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0198D6CD68D36D6A20C0888F0EC574843976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 023B
Signing time: Sat 23 Aug 2025 12:00:42 +0000
Manifest this update: Sat 23 Aug 2025 12:00:42 +0000
Manifest next update: Sun 24 Aug 2025 12:00:42 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: ow2awUZtk7/GFiW3aDuV30vJaLQ6rmweJwP8zv1Ow4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:68:d3:6d:6a:20:c0:88:8f:0e:c5:74:84:39:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Aug 23 12:00:42 2025 GMT
Not After : Aug 24 12:00:42 2025 GMT
Subject: CN=92aea3aa9a0dff66d08528ee6c50cafc903a047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:cd:9f:09:74:e6:15:a6:af:57:86:7a:02:
e4:97:0b:a3:6b:59:2d:8a:2b:f4:7d:df:0f:eb:3c:
68:ce:01:2c:be:ee:a1:2d:ae:ad:29:87:d7:77:ab:
c1:9a:e9:59:f8:0c:8b:bc:ab:24:40:a7:05:1f:4b:
51:24:9e:7e:55:56:fb:a6:dc:b0:e9:15:07:bd:30:
ea:03:b5:ac:6c:d4:32:e8:93:5a:2c:41:4e:2b:d2:
fe:cc:ac:be:58:67:45:c0:73:96:89:65:fd:b8:c3:
0f:38:09:95:93:87:0e:cd:45:ba:48:2f:09:12:22:
a3:b7:76:f9:ea:78:b7:e4:36:8c:c1:49:09:22:b3:
4b:a5:00:2d:15:46:db:a5:24:b0:af:bc:4c:d0:98:
b9:1a:94:7f:12:ce:cc:2d:db:65:64:2a:17:cc:93:
0b:ee:75:70:93:38:eb:ef:0f:eb:cc:5a:63:77:94:
a7:25:66:71:da:3f:e8:a4:5e:72:5a:6c:80:96:82:
53:b2:cd:db:26:22:ca:e0:99:7b:16:4a:05:88:f9:
bf:41:1a:3f:07:43:25:87:b8:ae:3c:f9:c5:ee:4c:
d5:e4:ab:24:93:15:55:0a:c9:77:83:3e:40:59:24:
af:d0:5b:c0:64:90:82:e9:38:ad:e1:e9:f9:67:1c:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:A3:AA:9A:0D:FF:66:D0:85:28:EE:6C:50:CA:FC:90:3A:04:7D
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:3d:59:1e:24:10:c0:91:c6:84:9b:66:31:70:1a:37:40:
8a:18:90:81:09:ef:3c:44:68:2e:19:b4:6a:13:0d:e0:f9:15:
bd:a0:e4:86:f5:db:0a:25:b9:9c:7e:06:77:37:45:9c:95:0a:
16:a8:e4:be:3e:ab:7c:80:35:0c:0e:83:09:4c:cd:af:4c:a0:
6c:1d:eb:b6:61:cb:eb:1b:d8:d5:26:41:81:5b:9b:80:6d:67:
9c:16:9b:4f:97:d3:ff:58:e8:af:ed:ca:88:41:6f:b0:22:bc:
1a:f2:ce:a7:6f:aa:f7:e1:a1:80:76:7a:06:30:d8:30:17:1d:
ab:2d:f0:47:56:02:7d:d8:7e:83:0b:7c:10:97:ae:de:d6:5f:
4b:61:7b:07:ba:78:c9:d1:85:9b:30:b9:c9:06:f0:85:8b:a8:
d7:de:f2:92:52:54:3d:78:6e:dc:f2:c4:91:23:ed:dc:50:f8:
a1:1c:10:60:1a:9b:8d:4b:7b:0e:39:96:db:bf:e6:10:6f:5d:
08:37:7e:f3:28:27:73:fe:6b:ab:27:bc:98:e0:7f:f6:69:02:
9d:87:44:d7:e9:a7:77:4e:f5:5a:c3:c3:16:d5:5b:e6:df:9c:
b0:3f:eb:2d:2d:88:23:b9:eb:41:e8:31:11:d4:4f:0e:43:f9:
da:37:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:17 2025 by rpki-client