Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: t6yb4e6WQFVaFsjl/MXedZCa8+GE3iqHE7ICqK/iLMc=
Subject key identifier: EC:58:2D:89:DD:24:62:F7:B7:2F:2F:1D:D0:61:37:87:88:14:28:7C
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 019A4C615E797DCF03DFA316FFAC236DE0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 14C7
Signing time: Tue 04 Nov 2025 01:00:40 +0000
Manifest this update: Tue 04 Nov 2025 01:00:40 +0000
Manifest next update: Wed 05 Nov 2025 01:00:40 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: fenb+VTP5x28+H0zi2hzsHOsXt51rLdYrVZ0KWQLp0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5e:79:7d:cf:03:df:a3:16:ff:ac:23:6d:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Nov 4 01:00:40 2025 GMT
Not After : Nov 5 01:00:40 2025 GMT
Subject: CN=ec582d89dd2462f7b72f2f1dd06137878814287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:45:ed:c9:6b:e7:d9:29:ea:47:35:9f:50:
1e:cf:e2:7b:d7:7e:70:80:77:ab:87:94:65:da:3e:
26:55:61:41:19:27:b6:87:e0:00:43:96:a9:69:a6:
dc:ee:f4:26:b2:e2:4a:88:5e:17:a7:c4:b6:81:f4:
f1:7f:91:e4:a8:9c:1a:c3:d0:71:0d:6a:48:51:c3:
cb:1d:05:52:19:66:fb:2a:2a:74:a3:27:f1:62:53:
e0:b6:c6:df:cc:ee:fe:09:61:56:79:98:09:8a:c8:
9e:a7:ea:78:a8:c4:e8:cb:3a:9e:e7:5b:25:a0:c7:
ca:d8:9b:b4:c0:b9:08:6c:94:aa:8d:92:86:cf:88:
d5:13:64:e4:52:4c:40:50:55:fa:12:e7:8c:fb:3a:
2a:36:6b:74:2a:c4:bb:ae:54:b8:9a:0e:46:5e:df:
61:a3:39:b3:a8:f6:4a:cb:9c:8d:93:49:ee:da:ca:
f2:da:d3:6c:f5:cc:15:e8:b0:8b:17:26:15:43:81:
2c:32:48:fc:16:3d:35:34:e3:35:07:be:cc:86:39:
12:ce:bf:96:37:2a:ba:32:75:8a:b4:f4:8e:0a:e1:
07:5c:ed:30:67:22:9a:e6:5a:bd:58:8f:4d:5a:81:
58:a1:19:f1:4c:33:21:28:ce:b3:11:ff:f9:61:49:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:58:2D:89:DD:24:62:F7:B7:2F:2F:1D:D0:61:37:87:88:14:28:7C
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:9a:d3:4c:07:bd:ec:8e:78:b4:a7:49:f6:4c:30:6b:f2:
ca:7c:b9:f8:d2:24:4c:7c:df:82:f6:8b:e3:68:f0:47:c5:35:
5c:e3:50:43:81:80:96:f3:ab:3f:c3:2d:5d:6d:11:9d:36:d8:
ce:f2:15:27:07:e3:75:f8:8b:b4:e7:41:2b:18:31:bd:58:5a:
22:b0:34:fb:48:3f:dd:20:2f:4e:da:30:d8:d8:bc:ed:88:7d:
17:44:71:e0:e8:4e:4a:db:c8:82:f8:37:05:cf:13:27:68:96:
0d:f0:2c:84:0d:41:ff:7b:d9:d2:26:01:05:a7:ae:7c:26:e1:
bb:af:31:cd:c2:9b:f6:19:39:30:cf:dd:ff:08:38:1b:47:a0:
07:96:46:a1:2f:29:a8:ce:41:ea:54:a2:43:88:54:df:49:18:
e9:42:a6:54:87:96:d2:01:06:ee:02:c3:b7:e9:3f:be:94:ab:
6e:48:0e:7a:bd:d7:6e:61:0c:8e:e7:e9:7a:28:62:f3:f1:70:
5c:99:bc:dc:e5:38:d2:75:65:03:79:d5:07:64:d1:c0:b0:2f:
18:60:2a:6b:c4:da:d2:42:eb:5e:45:52:26:1f:45:60:c4:e0:
e7:3e:af:08:8d:b6:84:48:15:62:74:24:22:83:29:78:92:cf:
c6:dd:19:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:41 2025 by rpki-client