Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier: 8XUSmT2Ld3wHtdjUC7jIYSXJDz/gJ5/WVNVqE5/18Ps=
Subject key identifier: DC:E2:5B:29:A0:05:23:A4:B8:EB:0C:C8:6E:1A:B0:FE:03:99:A0:BD
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer: /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial: 019A4EF44D7DAE7E9B51EF35FD30E441B50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: e6otoDFhDkrIg3tlW9dz6F1Y3ERp6D1D7haHJU3lim0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4d:7d:ae:7e:9b:51:ef:35:fd:30:e4:41:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=dce25b29a00523a4b8eb0cc86e1ab0fe0399a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:05:df:d3:06:5f:af:b0:53:0a:5c:b5:ce:
a2:fb:16:cf:7d:d2:89:bb:b8:9c:e8:2a:fc:d9:bd:
1d:cf:de:b3:c0:ed:14:02:df:98:05:37:ec:42:b2:
a9:95:c3:6c:4c:60:75:03:41:89:1f:9b:83:7a:da:
4a:1d:4d:3f:38:2a:4a:68:8c:fb:b9:1e:65:8c:af:
73:e2:03:f6:7a:5b:11:38:b6:14:85:f4:12:a5:4b:
7b:f0:ad:98:c7:71:61:16:ca:b1:35:c8:c1:12:b3:
a3:ee:ae:a9:fc:62:ca:ad:56:21:62:8b:3a:47:a1:
29:49:9d:d7:a9:74:9d:80:a6:a1:64:c5:02:a7:eb:
d2:27:06:b7:df:27:b9:8d:6b:43:6d:93:29:53:8e:
c6:9f:9f:8c:41:5e:18:bd:50:22:38:44:82:9c:24:
88:36:c5:31:97:a3:7a:1b:0f:f0:70:e0:96:db:0c:
8b:70:3a:f3:31:63:cf:14:d6:7d:4a:0e:53:f8:27:
63:a8:62:25:d8:b1:1c:a9:bf:a1:9a:c2:01:87:ed:
9d:f5:ad:53:e8:b4:c5:2f:1b:80:c9:a3:ba:3b:a3:
92:6d:74:3a:c8:48:61:ce:a3:64:7b:af:54:0d:44:
d2:6e:7b:29:71:8a:33:86:59:00:f9:24:84:57:3c:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:5B:29:A0:05:23:A4:B8:EB:0C:C8:6E:1A:B0:FE:03:99:A0:BD
X509v3 Authority Key Identifier:
keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:54:e0:e6:54:d7:ff:7a:1d:f2:cf:6e:ed:25:c5:8b:5d:
0c:94:15:7f:db:a7:f5:72:35:70:67:78:21:6f:81:67:cd:68:
c1:a5:bd:63:bd:9d:21:13:35:71:d3:c6:40:c4:96:15:aa:b8:
92:50:64:52:c7:fe:5e:ab:ef:5f:c2:81:7c:fe:17:e1:c8:18:
a7:b2:f8:bf:de:ad:79:bf:54:6d:b2:92:e6:6f:f1:2f:d0:f4:
3b:cc:7e:ac:4e:a1:b4:53:41:d7:5b:a2:32:d3:8b:e9:d8:15:
8d:47:57:90:99:23:18:48:03:54:7c:b9:5a:1b:af:3d:70:5a:
c8:01:52:68:81:56:65:e5:12:ae:0d:65:68:54:09:da:d6:02:
38:95:63:5b:96:84:a3:d4:28:4d:99:41:22:3f:89:11:6c:a1:
2e:b6:96:9c:a9:70:12:74:cd:1e:50:98:65:31:c7:5c:44:e7:
96:4e:b6:5f:49:35:39:69:d7:d5:ee:b9:0b:02:6a:60:13:5f:
0a:38:24:1a:4f:2c:b9:8f:b9:61:7c:db:ed:7a:93:35:5e:77:
53:b7:ef:49:12:d8:0a:20:45:7c:f9:89:cb:33:31:3b:4f:52:
2f:81:0c:bd:e7:3f:a6:31:90:89:ed:1e:b8:4a:2a:dc:ff:b5:
64:48:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client