Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: kBDGS22d5prQ0OXWUipWY8dCMDfCPhrX1oc/SmVO46c=
Subject key identifier: 43:23:90:D7:E6:77:E3:8C:23:0D:A8:CC:EA:D4:AF:6B:AA:55:DA:C8
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019A4EF5B4E14F69A16CCE370EF979BAE6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0308
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: Aze6h0mUiBaZ1tDUDIifbOjgrV2N5/B/19ZYoSq3ssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b4:e1:4f:69:a1:6c:ce:37:0e:f9:79:ba:e6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=432390d7e677e38c230da8ccead4af6baa55dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:c7:f1:a0:9f:ae:7b:90:32:cb:3a:12:21:
92:bc:d2:6d:48:4c:99:70:d5:1f:82:c3:81:97:3c:
2d:16:22:34:f6:00:46:64:6e:6f:51:98:2c:ea:3a:
06:fa:6f:6f:59:ea:96:5e:5e:63:16:03:e6:6b:6b:
32:ae:c0:54:64:21:13:b2:7a:19:f6:dc:a7:d9:2f:
fe:9f:eb:b3:ef:96:4e:60:dc:6d:4f:2a:c2:d0:17:
d9:49:46:3b:ad:2b:ee:3b:4a:68:3d:ea:90:03:67:
9b:3e:db:92:2b:f7:78:1e:18:c4:92:28:15:24:25:
84:0d:3b:c1:17:d1:e5:b1:29:9e:22:a8:2b:08:c9:
00:52:25:e5:0f:f7:d7:7b:fe:2c:95:50:06:8e:48:
e3:97:d8:3e:12:c1:0d:2d:8c:47:8c:0c:f2:f1:51:
6e:0e:ae:05:93:4c:48:38:f0:06:69:fe:a4:90:c4:
bc:7a:83:6f:78:0b:a5:fa:18:ea:fd:a9:89:4b:5a:
00:29:07:d0:59:aa:84:a7:e7:1a:a2:ed:bb:84:ed:
25:fe:02:68:c9:c0:98:f5:fb:76:07:21:dc:77:03:
ca:4f:5f:96:1f:ca:fa:d2:25:85:83:e4:27:f2:ba:
78:e5:b5:32:36:a5:5e:eb:92:84:af:37:fa:f3:e6:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:90:D7:E6:77:E3:8C:23:0D:A8:CC:EA:D4:AF:6B:AA:55:DA:C8
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:dd:ad:61:3d:66:b1:91:7c:ec:87:3e:2b:ff:c1:3b:d7:
e3:f5:f7:8a:83:5d:69:92:e1:8b:24:ec:30:f6:74:72:f2:a5:
19:f5:20:20:11:1b:f6:c6:43:70:c1:c4:84:d9:bb:df:47:48:
37:77:e1:a8:44:29:92:f9:7b:3a:38:fb:aa:a4:2c:ec:e0:52:
2b:fa:03:02:fc:6d:a5:dd:f6:7f:e6:dd:3a:70:e5:25:85:93:
9b:13:0f:fc:9b:e8:a0:86:8f:89:9b:30:3d:d1:ea:54:e7:33:
72:59:32:c5:cd:15:e6:45:78:84:40:74:4a:6d:44:37:c9:c3:
97:f1:dc:79:6a:77:23:0b:11:59:65:50:a0:37:45:89:00:51:
4c:8e:da:d9:ee:26:ed:5a:f3:4e:73:e4:59:24:2f:6c:b6:16:
da:c4:65:1b:e9:89:08:08:f6:06:90:55:21:f4:98:cc:2f:1f:
8f:4e:69:d3:38:5d:03:61:72:98:46:31:46:d6:c4:a7:17:4c:
38:d5:7b:6f:b6:70:69:36:72:1d:7f:74:33:c9:32:d8:fc:b2:
d7:63:84:1e:d8:12:35:39:74:8c:ba:5c:2a:de:3d:1a:da:58:
1b:99:7d:ed:53:94:c8:7e:df:1a:72:aa:b2:4a:de:0f:45:ff:
a7:01:22:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bThT2mhbM43Dvl5uubmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj
MzE1OWQwHhcNMjUxMTA0MTMwMTU2WhcNMjUxMTA1MTMwMTU2WjAzMTEwLwYDVQQD
Eyg0MzIzOTBkN2U2NzdlMzhjMjMwZGE4Y2NlYWQ0YWY2YmFhNTVkYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40bH8aCfrnuQMss6EiGSvNJtSEyZ
cNUfgsOBlzwtFiI09gBGZG5vUZgs6joG+m9vWeqWXl5jFgPma2syrsBUZCETsnoZ
9tyn2S/+n+uz75ZOYNxtTyrC0BfZSUY7rSvuO0poPeqQA2ebPtuSK/d4HhjEkigV
JCWEDTvBF9HlsSmeIqgrCMkAUiXlD/fXe/4slVAGjkjjl9g+EsENLYxHjAzy8VFu
Dq4Fk0xIOPAGaf6kkMS8eoNveAul+hjq/amJS1oAKQfQWaqEp+caou27hO0l/gJo
ycCY9ft2ByHcdwPKT1+WH8r60iWFg+Qn8rp45bUyNqVe65KErzf68+ZJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMjkNfmd+OMIw2ozOrUr2uqVdrIMB8GA1UdIwQY
MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt
ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy
LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyTdrWE9
ZrGRfOyHPiv/wTvX4/X3ioNdaZLhiyTsMPZ0cvKlGfUgIBEb9sZDcMHEhNm730dI
N3fhqEQpkvl7Ojj7qqQs7OBSK/oDAvxtpd32f+bdOnDlJYWTmxMP/JvooIaPiZsw
PdHqVOczclkyxc0V5kV4hEB0Sm1EN8nDl/HceWp3IwsRWWVQoDdFiQBRTI7a2e4m
7VrzTnPkWSQvbLYW2sRlG+mJCAj2BpBVIfSYzC8fj05p0zhdA2FymEYxRtbEpxdM
ONV7b7ZwaTZyHX90M8ky2Pyy12OEHtgSNTl0jLpcKt49GtpYG5l97VOUyH7fGnKq
skreD0X/pwEi8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:00 2025 by rpki-client