Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: zx8/v3V/pobGLtIi2QAE7R6CMjOxOvVp2uDhtdbxqTI=
Subject key identifier: 38:3A:9B:2A:84:B8:3E:23:24:B9:4E:00:54:83:22:C6:AD:22:47:F0
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 0199FC583B11C2B4627F2EE8F7EDF86F8FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: oUfrBFDzt87yDtlEWa6+zB7dP9asNJQ7vdvu5v3Dpd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3b:11:c2:b4:62:7f:2e:e8:f7:ed:f8:6f:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=383a9b2a84b83e2324b94e00548322c6ad2247f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:d6:ad:1d:d2:44:95:53:ad:8b:4c:4e:f8:
b7:16:7e:a5:a9:05:69:a0:ab:3e:7d:1d:28:f0:df:
ab:7f:62:9a:b0:52:1d:e3:d6:a2:80:6d:d4:ba:52:
c8:f2:a9:83:27:e3:4b:fd:06:3e:2c:8f:77:a9:ab:
33:2b:44:12:4d:82:77:79:71:69:57:9b:0c:35:a8:
4d:bb:19:a0:db:fb:2f:03:6d:3b:a1:ad:96:3b:c4:
24:cd:c5:ad:2a:f0:d8:b2:d5:11:dd:69:ea:0c:a5:
f3:c0:27:1f:81:f5:02:cd:7f:c1:e4:12:d8:f6:9d:
1f:f5:7a:36:fe:9a:05:f7:07:70:a8:f6:a3:55:4b:
62:1c:2b:f9:f7:fc:93:ab:57:8d:ca:28:1d:76:80:
c2:70:1e:c5:23:1d:d5:bb:16:31:87:de:2b:a8:29:
20:40:f7:3c:06:a6:49:fd:17:f8:57:7e:ba:ff:9e:
a0:ee:c2:87:1c:49:82:52:62:7c:17:f0:39:40:0a:
4b:dc:fd:f4:8e:90:13:c2:0f:4f:f8:ef:3e:0d:8a:
f2:23:4c:8c:95:f2:12:23:8e:2c:0a:51:4d:96:20:
27:d9:fd:20:b2:00:82:79:04:a3:90:62:40:01:69:
a4:34:1e:a7:7c:f0:c4:13:51:dc:a1:68:84:ed:c8:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:9B:2A:84:B8:3E:23:24:B9:4E:00:54:83:22:C6:AD:22:47:F0
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:15:27:c0:6d:fd:9d:a2:85:90:8a:5f:d1:5c:b5:b7:6f:
20:a2:ab:c9:88:ec:0c:f7:91:c8:23:81:ff:e4:be:1b:a9:05:
92:c2:68:af:a4:39:73:ac:97:b7:a9:74:67:26:00:ee:93:8c:
49:d7:fe:a4:57:6c:ce:6b:33:c8:b3:e8:84:b7:25:aa:09:f7:
bd:d1:5b:6e:0c:e6:a0:b8:36:32:0a:f6:37:2e:ad:f2:c6:57:
40:27:1f:e9:aa:d7:31:3e:54:4d:b0:9b:52:60:0f:90:0a:fb:
b5:73:42:20:e6:91:a7:6e:08:ed:48:e7:f1:e8:e1:b6:25:6e:
c4:ab:3c:f2:97:87:4e:2d:88:9e:0e:44:e9:09:b6:1f:43:0b:
ba:f4:fd:bb:b2:f8:7f:cc:1e:7b:8a:bc:88:c6:81:f2:9d:5f:
ce:ad:c3:12:fd:da:fb:72:06:0e:98:67:18:28:b2:76:90:e5:
a8:a5:7c:59:d0:ab:eb:aa:96:8a:c4:25:c2:c1:c5:00:cf:40:
49:80:41:9c:bd:1a:ca:32:d5:79:21:ce:5a:04:e6:4c:68:16:
96:78:4b:3e:14:34:ae:3e:f8:6c:26:36:12:3e:fa:f3:44:5a:
31:25:98:7a:63:46:8d:69:ef:5b:65:49:a3:b0:6b:01:a3:56:
9c:59:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:45 2025 by rpki-client