Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: ABKdMeJaoSLt/Bw2zhj7dEJRc6uqKTK82V2ShkgLWeM=
Subject key identifier: FA:82:73:8F:CD:F5:DF:8D:4A:21:57:7F:BE:AB:32:8D:09:D6:48:0D
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019A4D7402B800966CC8302D5FA5D12156B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0C41
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: sj3hJjUrBysU+OXSs98/38HI1wn/+OI9rNPypNknMlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:02:b8:00:96:6c:c8:30:2d:5f:a5:d1:21:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=fa82738fcdf5df8d4a21577fbeab328d09d6480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:72:43:19:6a:67:ed:0c:82:58:16:5c:1d:
9e:3e:2b:d1:28:f3:55:10:55:0e:d7:e1:e2:c5:93:
d4:79:b7:ba:cd:1c:7e:99:9c:ac:f6:d7:15:7e:26:
4f:f8:9c:1a:1b:0c:82:1f:9b:d1:3c:c6:f7:90:95:
a9:6d:af:10:b4:36:8c:fe:54:92:bb:53:53:4b:56:
47:2f:cd:3a:92:d4:f3:c4:5a:38:fc:a6:d1:9b:76:
2c:6c:88:43:2f:b9:67:83:0d:5a:af:c2:f7:ac:2b:
5c:97:f4:db:bc:9b:b1:86:79:2f:77:a1:a7:f4:29:
c6:74:ae:64:07:ba:39:02:d0:d1:71:b2:7c:61:d6:
f4:80:3d:fc:c2:43:5e:60:96:c9:10:ad:04:cb:e0:
45:e3:ab:0f:59:ae:84:dd:08:a6:e7:05:d0:2d:38:
46:98:71:74:5b:24:e3:8d:72:a7:2d:e2:4a:0c:48:
6b:71:98:a1:02:e1:0d:b2:67:b8:40:f9:b4:a6:93:
c2:0e:18:46:e1:13:2f:f2:e9:ce:81:b5:84:1f:05:
95:25:d4:2c:4d:47:96:ae:d6:c0:6c:59:b2:a1:8c:
fd:fa:a9:66:e5:f9:ab:84:3c:18:6e:e8:40:84:26:
2e:87:14:b3:aa:dc:19:93:f3:14:e8:93:f9:ac:53:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:82:73:8F:CD:F5:DF:8D:4A:21:57:7F:BE:AB:32:8D:09:D6:48:0D
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:89:9f:87:15:ef:22:bd:16:a5:41:5b:f8:79:19:81:90:be:
97:1d:29:a5:82:36:83:73:ca:7c:60:6b:1a:44:24:55:a5:bf:
26:1f:f1:45:c7:01:9c:a8:de:57:71:5e:7b:ee:b6:b2:41:64:
4e:2f:cf:3b:7f:05:1f:9f:52:34:90:ed:31:c4:c2:ba:cd:db:
a6:03:91:81:f5:14:09:5e:c8:72:a1:c3:cb:c9:3b:83:5f:67:
25:a8:4d:d3:ae:f1:f2:e4:c3:c7:62:d6:74:0a:5b:7b:57:a3:
1c:bf:85:fb:cc:a0:7f:89:22:ad:0d:9d:b3:1d:ec:fb:84:68:
63:86:f9:0a:13:c9:13:84:3a:10:ab:bd:2e:5b:f0:25:aa:27:
70:d5:ec:58:f6:32:22:57:bc:c3:ca:d9:35:74:99:a1:53:6a:
e6:5e:9c:31:c7:eb:45:88:d5:33:86:25:ef:e2:1c:54:1f:86:
65:dc:e0:1d:f7:db:d5:0a:73:b0:e8:96:64:6d:ef:19:7e:e9:
7e:df:2e:c2:5a:46:c7:cf:0b:04:f2:f1:29:f6:c7:a2:29:38:
79:09:15:d4:0e:72:77:2b:10:c8:2b:13:9e:2d:1a:16:6e:78:
44:5c:42:ac:81:62:ca:af:b0:fe:21:5d:74:75:a1:3e:34:01:
b9:ba:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:36 2025 by rpki-client