
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: ahKkao+Pl0UEO2S6XkzyTshrUmBDrud/fPdnphna+g4=
Subject key identifier: 9C:01:96:B9:FA:EF:19:31:38:86:EF:70:A8:0E:7C:E6:D3:9D:32:B9
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 01987F7A4F749B7154FB52FD0E8B9EA747FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 0152
Signing time: Wed 06 Aug 2025 13:02:58 +0000
Manifest this update: Wed 06 Aug 2025 13:02:58 +0000
Manifest next update: Thu 07 Aug 2025 13:02:58 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: /PVRRcI/7ctNs+BW3FXJMY4XOw3L5iLfHaKhVgagsMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:4f:74:9b:71:54:fb:52:fd:0e:8b:9e:a7:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Aug 6 13:02:58 2025 GMT
Not After : Aug 7 13:02:58 2025 GMT
Subject: CN=9c0196b9faef19313886ef70a80e7ce6d39d32b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:4f:1f:a2:cb:5b:e2:c0:b7:44:09:26:17:
db:94:b1:4e:29:e8:cb:d2:26:54:7f:34:49:2a:95:
ae:94:9f:3e:ea:e0:a0:21:c9:10:37:29:c0:36:e7:
c9:c2:64:f3:ec:f6:fa:67:27:08:9a:4b:54:ae:87:
cb:3e:1b:37:a4:45:49:b2:16:ce:a1:da:0d:da:01:
af:1b:cb:5e:5f:ad:af:f7:59:91:0f:fb:3a:a5:21:
8f:a4:a2:a5:97:01:d8:cd:43:db:38:61:53:56:31:
35:80:f9:83:d0:f0:3e:b8:dd:4d:bb:3b:9c:de:c9:
de:49:60:57:71:04:c3:c8:92:e7:26:96:bf:88:40:
a6:ff:5c:6c:ea:33:ac:84:95:7f:5b:9a:da:0e:e2:
7e:d7:37:18:51:e3:32:ed:4d:a8:9d:92:9c:54:dd:
a7:23:89:05:72:b6:26:d5:51:b5:d2:37:45:6b:4f:
2c:4e:ff:15:9e:32:59:a0:6a:50:1e:7d:8d:77:a7:
98:9a:46:56:18:a4:8a:0d:10:b4:85:e5:dd:51:70:
e2:a7:1f:57:cf:d7:ae:6e:5a:47:b7:5f:b2:b5:0c:
c8:ad:0d:59:dd:17:28:0e:b8:fd:e8:4d:61:41:c8:
5b:63:b8:79:99:b5:98:d9:9c:f7:b6:8f:f2:47:fb:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:96:B9:FA:EF:19:31:38:86:EF:70:A8:0E:7C:E6:D3:9D:32:B9
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:62:58:8c:e5:dd:ad:b3:fd:88:50:d6:e4:b6:ec:59:57:
fb:e4:ef:f6:77:f8:13:f7:49:49:5f:6d:7a:6d:a6:3f:d5:c3:
0d:a9:b2:d2:46:c8:77:1f:3d:49:ac:68:b9:6e:c4:ec:5f:6f:
53:40:73:21:9b:e0:59:d3:f7:00:a8:86:ec:e2:f6:00:33:8f:
e2:9b:3e:ef:e0:2b:55:23:56:98:e3:31:c3:6c:48:3c:f3:09:
47:c4:ac:a5:f9:00:45:bf:ff:c3:3e:f8:9d:1a:92:5a:98:5c:
57:95:73:de:f5:a1:75:6b:e7:d7:f4:6f:d0:77:39:03:15:b3:
a9:9f:62:7a:b5:0a:94:68:cb:a1:ef:33:61:48:88:65:ad:ae:
4c:63:c6:c8:02:c8:e5:5d:31:e4:a7:3a:99:6a:63:dc:cf:e1:
0a:f2:43:5e:c2:d8:34:33:fc:9a:6d:8a:f8:c7:b5:1e:1d:ba:
8f:cb:6f:35:60:9c:2a:4d:b1:4b:35:7e:2e:42:49:b4:8f:cb:
60:03:a9:4b:54:e9:cc:a6:dd:44:a5:e9:aa:da:98:80:81:56:
0f:8e:24:00:64:8b:ce:95:bc:75:e7:a6:60:a2:48:ab:8f:42:
67:d5:40:7a:d9:78:dc:2a:68:9f:12:49:84:61:c3:38:dc:8e:
ef:74:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:44 2025 by rpki-client