Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: 0nFYfLGu5tPbvm+IvsAeF3mqXy386dl9w/XVmiwPySg=
Subject key identifier: 4D:A5:75:12:66:E0:5D:D0:BB:EC:F3:A1:08:68:3D:0C:88:60:5D:0A
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019A4E190440976F2C8EB3A08641AC1FB84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 04C9
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: 6bth/gzsS2gmEsGhvPER+jbuOtEXudHHAZ7FA+4FOZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:04:40:97:6f:2c:8e:b3:a0:86:41:ac:1f:b8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=4da5751266e05dd0bbecf3a108683d0c88605d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:93:0a:44:ae:d8:51:fc:fa:11:d4:be:6c:
7c:8d:34:12:6f:e7:e3:59:27:3f:dc:c0:d1:be:b5:
95:fa:02:ff:4c:dd:03:80:51:bd:c2:38:3d:e5:19:
18:47:6f:1f:09:52:4b:9e:09:46:8c:66:a4:80:54:
15:7b:b9:da:8c:ea:ed:6b:47:2a:8a:71:eb:5f:80:
4e:51:4b:b0:dc:d5:2f:5c:51:7d:9b:1a:93:50:93:
3e:d0:2e:74:3e:95:3e:48:6c:20:b4:d5:a1:13:c3:
1d:bb:a2:ad:a3:ab:9b:fd:6b:db:4e:ed:1f:cc:86:
88:c6:09:10:77:28:01:ef:2e:1c:8b:e9:9a:e3:67:
af:0c:20:8d:6c:fb:4c:b5:0d:09:18:c7:38:ef:0f:
0d:94:f6:16:55:9e:a4:3a:f4:ef:84:6e:27:ce:af:
90:3b:b2:ae:9d:76:83:16:0b:5b:3c:07:ce:f9:50:
ca:2a:b9:92:0f:02:57:11:93:20:36:31:9b:41:9d:
92:a1:78:c0:cc:09:0a:fb:ae:85:ca:4c:7d:de:c6:
92:6f:5c:e3:22:bc:d9:8f:8b:e0:1c:04:a9:d2:9b:
95:c8:7b:46:d3:6e:81:20:ff:56:bd:6d:c0:b6:af:
16:42:34:19:2b:3f:6a:cb:c9:a8:9d:93:41:ca:bc:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:75:12:66:E0:5D:D0:BB:EC:F3:A1:08:68:3D:0C:88:60:5D:0A
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8d:d9:91:e6:c8:8d:03:21:d2:3c:19:da:27:72:df:10:4a:
e7:a7:3c:97:01:9c:22:03:82:f4:5d:8b:2e:a2:43:78:7f:81:
9c:f3:13:56:74:40:71:83:70:62:bb:ed:6b:87:a6:5c:e3:7f:
e5:17:8b:c0:46:f6:b5:e0:57:c5:b2:0f:53:5b:2f:be:1f:77:
87:7b:45:fe:75:2a:6d:db:cc:35:27:ff:08:c4:48:d1:e2:75:
48:04:84:a9:5f:a9:dd:78:e0:07:0c:e8:d4:56:a6:96:0e:78:
42:f8:7c:e4:67:1f:c4:e2:5d:f8:3d:23:f8:9d:d1:f9:dd:17:
96:e0:f7:e9:9c:cc:c7:4d:52:18:a5:5a:72:50:b8:eb:89:3a:
a6:f2:da:ee:63:c4:15:84:a4:1a:38:0b:67:52:af:a9:24:6a:
7f:63:b6:fa:f4:5b:b6:49:38:75:92:18:08:52:85:a7:ec:dd:
51:ea:86:77:ed:5f:c7:8b:0d:ad:a3:5f:6e:93:ae:33:0e:01:
b6:aa:06:ea:f0:9f:45:3c:72:a2:11:bb:0c:b8:80:0e:dc:91:
e9:eb:a8:71:26:b5:bb:3b:5c:db:fb:2a:0f:2c:d3:bf:83:44:
5b:0c:84:34:0e:59:12:c1:e4:a7:36:19:16:1a:e0:b4:e0:72:
d8:82:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:42 2025 by rpki-client