
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: yUC1832W4ia+JV4s7NSyOBszbCirytLMm6VL+FPnyhQ=
Subject key identifier: E5:30:66:17:B3:F5:3B:A6:AC:4B:91:42:A4:14:DC:E3:60:05:68:60
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 0199FBEB70DB130AA5CADE677FEEB239B60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 02DD
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: uOjh8pknB1sXuxpfa57FRcU4fyL6b7i3ZqBfFdD49K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:70:db:13:0a:a5:ca:de:67:7f:ee:b2:39:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=e5306617b3f53ba6ac4b9142a414dce360056860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:f8:e6:ef:4c:1e:cf:39:76:31:11:60:d6:
56:03:9a:27:67:53:15:ba:b6:b2:5a:d9:87:ba:b8:
1d:79:3a:4c:dd:48:5f:3c:1a:fe:ac:7e:a1:7c:96:
d7:be:05:59:20:5c:73:83:6f:6a:c5:cd:a2:31:39:
a0:bd:ff:2b:01:3b:72:c1:7d:99:62:f6:8e:05:4b:
14:f6:d1:16:86:35:03:e5:3d:1b:bc:fe:5a:c2:ee:
59:69:f6:bf:69:f6:86:21:ae:b8:d9:7b:b2:f1:74:
9e:4a:bb:1f:3b:24:6d:59:5c:c7:6d:bc:78:f2:c6:
25:f5:38:61:50:cb:e5:a1:ab:e8:7d:fe:61:9e:ef:
5a:1f:05:f1:77:64:db:db:8b:f9:84:c1:cc:0e:3c:
60:ff:3d:8f:da:98:7c:13:e1:59:1f:6a:1c:2c:0b:
c7:f8:39:6e:86:b1:1a:70:49:46:ea:ec:ed:05:46:
33:6a:6f:d1:21:03:dc:98:b4:17:27:cd:f3:64:b4:
d4:d0:63:8b:d9:96:7e:f5:a3:f3:fc:8b:02:ee:4d:
38:aa:e6:26:10:e8:14:b9:9f:80:13:fb:10:bc:2b:
82:8c:f1:09:13:76:64:87:8b:78:68:18:dd:de:51:
42:01:bd:2c:bc:52:77:f7:f7:e4:09:76:e6:13:fd:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:66:17:B3:F5:3B:A6:AC:4B:91:42:A4:14:DC:E3:60:05:68:60
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:9f:2a:2d:30:78:71:8d:2e:05:ff:d2:ef:ed:d7:3f:b0:
6d:f2:1a:99:00:46:4b:d4:2e:11:9f:44:23:71:63:89:f7:30:
d9:e7:66:85:dc:9e:1a:88:62:10:28:bd:16:8c:fe:57:3a:0b:
6e:05:2b:73:e6:8c:06:30:4d:5d:6a:3c:49:2b:86:a0:8a:6b:
aa:6c:ee:72:a5:0d:62:05:fa:37:e5:f1:d7:c8:db:c5:26:3f:
5e:7b:92:5d:6e:85:f2:70:2b:46:ea:39:55:a8:3e:97:e6:76:
bc:17:b0:de:31:5d:bd:f6:7f:9d:be:42:d1:90:26:e8:26:c5:
1c:b2:7c:8c:98:5a:a9:95:2e:ca:bd:15:aa:8a:3c:62:ef:41:
81:a3:f4:e3:6c:76:c9:57:8f:d5:8e:75:c2:fb:75:0d:d5:bc:
a0:b3:d6:5b:89:31:f9:27:b5:fe:27:f0:70:73:e9:d7:39:bd:
1c:8e:d8:f5:b4:40:a9:27:22:b3:70:21:9f:47:fc:81:4c:f5:
51:ee:62:96:66:1b:b9:21:b4:2e:a0:2e:b5:6e:db:2e:1c:4c:
80:a8:8d:95:82:2a:96:02:57:74:46:a0:1f:aa:6a:b4:68:90:
87:86:b6:f5:f8:b0:8c:4b:de:e8:9e:07:2c:a0:4a:07:eb:61:
87:5b:17:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763DbEwqlyt5nf+6yObYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj
MzE1OWQwHhcNMjUxMDE5MTAwMjE0WhcNMjUxMDIwMTAwMjE0WjAzMTEwLwYDVQQD
EyhlNTMwNjYxN2IzZjUzYmE2YWM0YjkxNDJhNDE0ZGNlMzYwMDU2ODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFz45u9MHs85djERYNZWA5onZ1MV
urayWtmHurgdeTpM3UhfPBr+rH6hfJbXvgVZIFxzg29qxc2iMTmgvf8rATtywX2Z
YvaOBUsU9tEWhjUD5T0bvP5awu5Zafa/afaGIa642Xuy8XSeSrsfOyRtWVzHbbx4
8sYl9ThhUMvloavoff5hnu9aHwXxd2Tb24v5hMHMDjxg/z2P2ph8E+FZH2ocLAvH
+DluhrEacElG6uztBUYzam/RIQPcmLQXJ83zZLTU0GOL2ZZ+9aPz/IsC7k04quYm
EOgUuZ+AE/sQvCuCjPEJE3Zkh4t4aBjd3lFCAb0svFJ39/fkCXbmE/0KFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUwZhez9TumrEuRQqQU3ONgBWhgMB8GA1UdIwQY
MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt
ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy
LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHafKi0w
eHGNLgX/0u/t1z+wbfIamQBGS9QuEZ9EI3Fjifcw2edmhdyeGohiECi9Foz+VzoL
bgUrc+aMBjBNXWo8SSuGoIprqmzucqUNYgX6N+Xx18jbxSY/XnuSXW6F8nArRuo5
Vag+l+Z2vBew3jFdvfZ/nb5C0ZAm6CbFHLJ8jJhaqZUuyr0Vqoo8Yu9BgaP042x2
yVeP1Y51wvt1DdW8oLPWW4kx+Se1/ifwcHPp1zm9HI7Y9bRAqScis3Ahn0f8gUz1
Ue5ilmYbuSG0LqAutW7bLhxMgKiNlYIqlgJXdEagH6pqtGiQh4a29fiwjEve6J4H
LKBKB+thh1sXeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:01 2025 by rpki-client