Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: +BvlL8YsyVPFoCfszQ8RnB3T/B4/bbfNTRdrJsKZhRM=
Subject key identifier: B1:4F:EA:0D:4E:31:AE:8D:56:1E:BE:D9:1E:26:C1:F7:FF:D5:8B:3F
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 019A4D07001ACA5B958128D370F4543E2787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 068B
Signing time: Tue 04 Nov 2025 04:01:35 +0000
Manifest this update: Tue 04 Nov 2025 04:01:35 +0000
Manifest next update: Wed 05 Nov 2025 04:01:35 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: mj6LqnSgt33vevqBs/hE8Gq0FODPMeLqa+z5PjSORnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:00:1a:ca:5b:95:81:28:d3:70:f4:54:3e:27:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Nov 4 04:01:35 2025 GMT
Not After : Nov 5 04:01:35 2025 GMT
Subject: CN=b14fea0d4e31ae8d561ebed91e26c1f7ffd58b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:0b:94:16:9e:37:8c:87:77:00:fd:e4:bf:
f8:d5:f5:38:98:ae:99:28:2f:d5:0a:f9:32:a5:41:
19:40:a5:c7:58:d7:5f:e2:12:50:30:0f:b0:00:96:
12:41:ea:ae:25:59:0a:b8:14:4a:fd:7a:4b:84:ac:
86:b8:85:c2:3d:0c:74:d4:13:1b:77:37:0f:44:90:
fb:0f:f3:e2:4b:31:ec:ef:cf:63:14:16:9e:d5:26:
38:84:22:9c:bb:5c:fe:43:f3:70:5b:d2:3d:97:f4:
0a:2c:fe:c8:64:96:6c:83:90:b0:76:51:53:25:1f:
d6:83:dd:a8:71:94:b6:34:75:e4:28:d7:a6:77:da:
03:d5:bf:15:28:0c:a1:6e:54:da:fd:60:c1:47:d4:
96:ee:82:91:57:45:eb:9c:c2:f4:fe:1b:27:ff:90:
93:32:db:23:e3:0e:37:f5:47:f4:24:25:ee:ea:38:
cf:cd:9e:bd:14:e0:ce:c4:fa:37:7e:22:7c:01:9c:
6d:75:ba:b2:0a:d6:df:f7:39:60:23:00:2b:68:05:
c6:7f:f8:7c:03:04:d1:51:d5:a0:04:f7:52:f7:c3:
4d:ff:9a:3e:8e:d7:56:db:8c:90:6a:2b:30:13:37:
76:6a:41:7e:37:18:02:fc:8b:95:ea:a7:0b:e9:f8:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:EA:0D:4E:31:AE:8D:56:1E:BE:D9:1E:26:C1:F7:FF:D5:8B:3F
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:23:e8:f5:72:51:bc:71:27:9a:1e:e5:63:d6:2f:dd:c9:ba:
57:44:64:4d:4f:e2:63:94:10:a7:44:11:1c:94:bb:8b:53:30:
84:d6:69:01:41:ae:27:7f:ba:b4:dc:46:1e:be:d5:c0:50:6d:
34:61:d6:d4:e8:33:0f:45:49:02:42:d6:fd:19:ab:a8:f7:1d:
d7:1a:91:a7:bb:3e:b3:7b:01:3e:e0:93:d0:24:7e:5b:be:61:
f6:82:72:df:ea:3e:51:d4:3d:09:be:c2:c2:bf:90:2c:18:69:
6c:b9:3a:0c:b4:37:17:68:c1:f8:0d:5e:71:59:25:72:55:6c:
27:33:59:ae:54:d7:70:92:cf:78:21:a2:97:ed:58:d2:10:24:
dc:17:db:93:70:ea:d3:b3:70:52:09:74:22:3d:d9:c9:f4:1c:
ed:80:f3:fe:32:70:1b:55:fe:fa:01:28:af:54:f2:60:6b:18:
22:6f:02:0a:97:c2:b1:0c:7b:4c:b9:95:d6:31:84:c1:d4:db:
ac:e7:ca:d2:32:e3:61:1e:79:f1:42:44:c3:25:30:74:47:72:
6d:64:ac:cd:9c:83:08:1c:0e:6e:a0:cd:a6:b6:26:2c:94:fd:
7e:55:0f:0e:31:31:ea:4e:fe:ca:09:78:a0:33:67:cd:c2:6c:
a3:ae:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:19 2025 by rpki-client