Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: RLlv4/etCA32YgVCNWtgnzo+klZ8yesaRa4sMcYyc1E=
Subject key identifier: E7:95:04:4A:A6:A8:3B:D8:B1:E6:7B:19:6B:D7:78:35:30:E6:74:FF
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019A4D73AD25C61406C36F7E936B0A954DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 142B
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: KaR0BzqxSuygxJmLcUM/WwZN/FtLUY6/wvOssl6A8Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ad:25:c6:14:06:c3:6f:7e:93:6b:0a:95:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=e795044aa6a83bd8b1e67b196bd7783530e674ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:30:f8:b5:64:f1:54:f4:d9:ad:56:c5:3b:
b3:52:75:b5:a6:4a:0d:48:e9:ef:6d:1b:06:5f:ee:
2a:2b:de:67:71:3c:6e:3a:83:97:8c:4a:55:62:4f:
de:f9:0b:a2:23:3d:3d:bb:be:59:ec:07:a2:55:79:
69:ee:02:1f:f5:0a:9a:c6:90:c1:27:b0:1c:69:fc:
bd:66:02:3d:19:96:ee:4e:ff:2f:9c:4f:1c:66:dc:
d6:3f:04:e7:c4:73:d6:c5:96:ae:8f:dc:5c:a9:2b:
a5:2a:e2:f7:e5:40:14:28:a5:b5:de:40:f9:22:a1:
90:b8:0a:92:ec:22:45:ff:a7:ac:57:b9:45:63:a8:
06:3b:f8:77:d0:7b:7e:21:9f:b5:6c:03:8e:67:83:
76:2b:1a:a7:81:a0:1e:6f:0b:a5:9c:29:dd:b2:c1:
7e:c3:c4:60:66:f8:11:3a:a8:4e:c5:4f:b7:12:62:
60:eb:97:08:91:df:a4:37:d9:77:73:30:45:2f:fd:
56:9f:6f:85:12:f5:19:be:90:38:76:4b:d7:6c:e9:
1c:a8:97:f7:35:c5:27:4b:a3:25:d5:a0:55:f2:05:
1e:38:60:49:2a:d7:7c:5a:ae:7d:80:a5:9e:7c:90:
ec:d0:ce:72:17:7b:d1:64:c0:13:d7:91:8a:07:a0:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:04:4A:A6:A8:3B:D8:B1:E6:7B:19:6B:D7:78:35:30:E6:74:FF
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ad:8c:30:d9:6b:ac:8f:e3:ad:f6:f2:1e:db:fb:12:db:1b:
38:89:76:62:62:b5:65:2d:74:7e:00:34:16:5e:fa:fd:8b:e8:
36:76:fc:c7:84:d7:f3:17:28:3d:2d:ed:3a:09:5b:06:16:24:
56:cb:c3:02:a1:bf:75:16:51:3b:fd:c2:d8:e6:da:53:23:9c:
f9:4d:f1:ad:b3:14:c0:86:9e:fc:1a:ac:2c:b8:b5:de:bc:5b:
79:09:0b:8e:d7:5d:fa:5e:7c:0b:66:55:ff:ff:2e:0e:16:23:
e6:c9:60:de:27:7f:d8:59:f5:9f:6a:f7:39:75:cd:ca:85:ea:
13:34:b2:19:21:be:2a:38:15:5c:0e:74:d1:5f:9f:35:76:ae:
ee:7f:fe:a7:d8:88:34:47:ba:7a:18:9e:cf:e0:31:b1:c1:55:
60:0f:be:0b:5b:5d:e9:a8:70:ad:b6:04:66:f5:e7:87:cd:2a:
61:ca:fd:81:31:53:8c:91:34:09:f9:4e:cd:53:54:af:11:ff:
a2:da:31:fe:de:b3:e1:45:b6:83:ed:02:0f:41:cf:dc:5d:a5:
61:f5:a6:35:c4:60:a2:4a:10:b4:62:aa:1a:79:9b:cb:8f:18:
ae:40:10:3e:22:2c:cb:06:b7:71:fd:94:97:44:83:e3:a5:19:
51:3f:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:47 2025 by rpki-client