Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: qIB6XXXpuqaERoyOQ5mJSxCYUGYNslh01cx9rK2qU4A=
Subject key identifier: B6:F6:68:2C:E0:E2:47:EE:0C:1E:C7:E2:90:EF:A1:CB:A3:7E:43:84
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 019A4DE22E885DD04D2086B2370D4AFC7D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 1517
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: QsWVN9wJz2qWWiQw0rWndazt2RHDurnIA8TIaBS3bK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2e:88:5d:d0:4d:20:86:b2:37:0d:4a:fc:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=b6f6682ce0e247ee0c1ec7e290efa1cba37e4384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:3b:7a:17:60:12:70:fc:cd:ea:ef:90:0c:
77:99:c8:4b:f3:63:24:31:c9:80:3a:af:fc:62:41:
50:e0:88:48:b6:38:b9:50:02:00:dc:e7:17:f5:41:
6e:11:60:d0:9b:45:53:39:20:87:c9:12:c0:d4:8a:
b7:60:e2:71:f1:2f:2f:71:78:39:24:a0:6e:ce:0e:
ec:43:e5:63:0d:20:62:ba:23:6d:a5:26:69:56:86:
c5:f8:56:35:cf:41:a4:bb:83:fe:36:fd:81:a2:28:
06:a0:52:67:9a:d1:5d:3b:0c:46:56:29:e3:64:65:
a1:33:29:0c:18:b3:4b:b3:e7:b0:5f:b0:99:0d:b3:
9a:87:ff:8f:70:c2:e5:0a:8f:6f:c5:44:cd:e7:57:
d5:6a:cf:aa:fa:ee:c2:91:d7:47:f2:e8:94:b7:28:
65:cb:de:6d:2b:50:9d:be:db:5d:ac:22:c3:20:c8:
4b:4a:36:a1:d8:fd:59:dc:e6:e3:fe:d2:5b:9b:fd:
de:7e:84:51:8f:98:da:68:eb:54:77:f2:7e:ba:69:
9d:4d:41:3b:77:50:25:2d:f7:2e:11:9f:d2:24:62:
e5:5e:be:3a:f4:3e:d8:1c:33:2c:39:0e:1d:eb:91:
dd:cf:71:50:e7:cb:70:1c:40:65:db:7c:50:5b:41:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F6:68:2C:E0:E2:47:EE:0C:1E:C7:E2:90:EF:A1:CB:A3:7E:43:84
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:11:ad:de:66:90:d0:d0:e7:eb:77:46:80:17:51:29:50:
8e:0e:09:4b:84:b9:c8:31:18:7e:f3:ce:52:ab:b6:f7:65:ab:
e5:34:f3:c0:91:ac:fb:0d:ac:c3:41:ca:56:4c:ef:b5:90:8d:
80:95:18:73:b3:b4:46:2a:dc:3f:db:f7:e3:29:7e:ba:cd:e0:
d6:95:9a:81:5a:51:da:cb:c0:8b:4c:a5:53:80:48:8f:80:a6:
5b:ae:e8:6b:0f:03:77:a7:2c:13:10:5e:df:29:62:cc:96:12:
bc:01:74:b9:14:dc:4b:a4:6c:83:5f:2b:6d:ae:de:03:f9:80:
71:aa:cc:22:be:73:ff:05:83:0f:4d:ca:ce:60:56:3c:b3:25:
9e:da:0b:0b:c2:0c:c0:08:20:dd:08:fe:fc:1d:0e:5e:0f:f6:
6b:c0:34:b5:65:c7:44:6c:bf:56:56:60:5b:e7:88:33:8f:e6:
f0:e2:de:fc:15:63:b7:e9:78:77:d2:ca:d3:6b:26:60:0a:7e:
0b:89:1f:f3:a0:55:2d:5a:b5:f0:be:e7:dc:d0:ac:5e:40:31:
cb:db:55:67:a9:46:a7:2c:76:ff:75:ec:06:b0:e2:e5:04:1f:
c4:f8:b2:fd:16:4c:6f:c3:80:0e:a3:7f:c6:36:bb:0f:e4:fa:
3c:a7:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:19 2025 by rpki-client