Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier: hRYPBcr+5e3NgmDbuZltQc6O8iev7B5IiNkFelT7t84=
Subject key identifier: 23:EF:DD:C3:E6:6A:C5:DB:BA:1C:A7:6B:1B:CB:E6:9C:32:C5:D8:4B
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial: 019A50E3CD9D1936EF7A38CBA4139B924906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number: 0F73
Signing time: Tue 04 Nov 2025 22:01:37 +0000
Manifest this update: Tue 04 Nov 2025 22:01:37 +0000
Manifest next update: Wed 05 Nov 2025 22:01:37 +0000
Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: JbCtXAwec5XM/mgvqbwFe4nfK6q8HajtkJ6lJ57V+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:cd:9d:19:36:ef:7a:38:cb:a4:13:9b:92:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
Validity
Not Before: Nov 4 22:01:37 2025 GMT
Not After : Nov 5 22:01:37 2025 GMT
Subject: CN=23efddc3e66ac5dbba1ca76b1bcbe69c32c5d84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:01:48:0e:49:69:e4:f7:04:f1:fe:5f:be:
ce:6a:04:07:ba:64:46:03:d2:12:b6:ab:fa:ee:19:
ee:6f:a7:47:7f:58:7c:eb:1c:04:96:3a:20:5b:a0:
91:32:6b:b2:97:27:b9:40:44:e0:6e:a3:60:1e:25:
73:67:37:a1:27:9b:42:b7:be:d0:88:c1:31:8e:8e:
16:37:2f:c8:fd:94:60:9b:01:3e:dd:20:c6:5f:e3:
71:40:2b:5b:25:f3:02:d2:d4:d7:5d:3b:e6:8a:78:
6c:90:1c:31:8b:32:f1:34:52:1f:8b:1e:07:05:3b:
a0:82:75:60:04:70:d2:91:5a:a3:5f:06:82:75:55:
27:11:b8:dd:77:6c:2f:54:31:f3:ec:20:4d:a7:1e:
b9:90:45:1f:ea:ce:dc:0f:6a:7e:6c:f6:d5:3f:22:
dd:34:82:ae:c4:f0:f4:90:34:b9:0a:8e:2a:a2:25:
68:c1:88:44:8e:ca:0e:af:9d:30:76:51:af:7b:4e:
ae:ff:f4:b9:cc:88:82:02:ed:d0:72:f9:e7:19:36:
c0:90:f3:c5:8b:b1:7a:c2:09:7f:94:0d:37:44:5a:
cc:81:d6:74:f8:21:17:ba:5f:0d:8d:a3:ee:01:f5:
a7:c9:a0:5b:b3:b4:62:0b:c3:ad:a4:d0:1b:cb:b9:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:DD:C3:E6:6A:C5:DB:BA:1C:A7:6B:1B:CB:E6:9C:32:C5:D8:4B
X509v3 Authority Key Identifier:
keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:83:d0:45:c2:71:4b:b4:aa:1c:af:8b:4b:6a:96:7d:92:0c:
0e:d4:de:59:d0:45:01:9a:91:ca:b5:3e:b4:44:e2:4b:fb:6c:
27:32:1f:6e:be:fc:3d:ee:9c:fd:a9:83:b5:68:e1:77:42:d1:
31:f4:36:18:6b:61:5f:47:7d:76:2a:b6:49:ee:60:76:bf:f6:
2a:e0:5f:0f:30:81:5b:6e:0f:cd:2c:53:7d:15:fd:f4:9f:7c:
05:f3:82:76:48:66:38:a3:57:7c:b3:04:62:8d:e8:10:54:36:
dc:45:59:5b:a8:f5:8d:0d:4c:d0:16:46:bd:74:96:19:ee:3c:
25:9a:31:c0:b5:f2:a7:d4:99:73:fb:78:73:be:5f:5d:aa:1d:
3a:c2:5e:e7:f9:02:cd:77:84:37:3e:a6:66:27:ee:4f:75:b3:
40:4b:ab:ed:ad:4e:31:2f:0c:8a:d8:b7:c2:ec:c6:0e:9a:91:
ad:c7:db:e4:06:c2:e9:07:5c:2a:4c:0f:e5:45:44:76:d0:73:
ab:77:d0:2f:87:66:30:e5:58:f7:a3:80:83:81:de:7c:bb:b6:
b5:6b:9e:85:26:84:15:a0:3a:b1:79:e0:8f:f7:52:68:03:0b:
77:f4:1a:2b:ac:d7:c8:50:99:24:90:e3:dd:d7:c2:b8:0e:e5:
88:d5:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:36 2025 by rpki-client