Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: Kb1zsK6R4w9f2b8FbbTuHftsLRedHzH6TRDi8knl+KI=
Subject key identifier: 92:0F:C2:0B:EA:52:BE:6C:70:28:A0:38:12:C6:F6:4C:CA:F8:6E:34
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 019A4EF5748D5A0A35463FC01BEF7072624F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: Ju5FpIKmHu8CrlMDmAOlsZPqc/iH3/HczaWDCdYa5GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:74:8d:5a:0a:35:46:3f:c0:1b:ef:70:72:62:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=920fc20bea52be6c7028a03812c6f64ccaf86e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:2d:5b:64:50:36:ac:e6:73:5a:1b:33:b5:
ff:a7:14:ff:49:4b:ba:fd:e1:81:66:39:46:db:bb:
71:ca:e9:94:20:95:d9:54:67:af:6e:65:e6:c7:0d:
7a:55:ba:11:65:28:44:b6:1b:c0:5d:3f:c7:d9:10:
4a:d2:91:da:8a:77:c9:a2:7c:55:d0:40:cc:aa:b0:
10:74:e3:c4:31:b7:7b:88:5e:5a:1e:99:08:9e:06:
91:ec:96:1d:89:e3:f5:67:68:93:3e:db:6f:7c:f8:
ee:aa:8a:84:9d:da:83:2b:2b:40:31:dd:6f:a3:cd:
ed:96:12:20:3e:96:74:2b:4b:e8:22:b9:51:6f:8d:
a3:0e:9f:3f:51:9f:c2:ba:67:73:ed:00:5f:35:a1:
46:3e:da:a5:90:eb:bf:39:6b:bd:99:87:1b:3f:30:
e2:68:11:dc:ef:bd:3c:18:9b:c6:7f:ac:9f:49:f3:
57:9b:59:b2:92:11:9f:cf:24:02:9c:6b:25:fe:b1:
8d:99:d0:0e:0b:b1:91:e8:75:e4:f2:c4:1c:10:ee:
ce:25:58:dd:5b:7f:9f:b3:74:a6:fb:98:2e:5c:c9:
19:b7:34:f5:dd:c6:d1:d6:fc:2f:73:b3:f3:91:db:
f4:f2:c2:b1:1f:17:93:83:cf:52:0c:90:48:cd:73:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:C2:0B:EA:52:BE:6C:70:28:A0:38:12:C6:F6:4C:CA:F8:6E:34
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8f:9c:cc:6c:6d:4e:e5:99:6d:6b:5f:1e:54:a1:74:e7:0f:
e9:86:0a:1a:9e:de:52:b6:83:a1:1c:04:fd:94:05:50:3b:f4:
0b:31:6b:24:47:c3:bc:f1:24:64:14:98:fd:60:c7:d1:db:eb:
8d:74:ed:ae:d9:db:4d:18:3a:2b:fd:69:1b:3b:7e:0b:e6:41:
c2:03:2d:2d:4e:5d:00:73:f0:83:8f:1f:0b:38:13:f4:9a:67:
b1:47:80:8a:85:c3:09:1f:a9:ca:6f:3d:02:4d:dc:33:8a:be:
ce:4a:2d:ba:cc:33:a9:1e:5d:51:ec:ae:97:97:52:d3:c3:0f:
7e:b5:cb:27:88:4b:a9:6f:15:36:e4:b1:6d:89:32:43:fe:e1:
b9:e0:50:17:bd:04:cd:35:06:88:20:cf:96:20:c2:47:eb:47:
ce:cd:d6:20:32:71:28:0e:f4:0d:dd:90:15:c5:67:6d:e4:c6:
9c:09:f4:61:0d:5e:61:00:a4:f6:55:a9:8c:36:a9:30:99:d1:
97:82:59:bc:10:8e:26:46:84:4e:3b:75:c0:95:a0:13:ec:89:
7c:e0:de:7b:1e:d2:52:9b:e3:e4:7d:03:de:bf:fc:d6:45:ff:
a7:3b:d1:94:0c:89:e7:4a:5c:98:3b:29:30:e6:99:86:49:33:
b8:1c:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:08 2025 by rpki-client