Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: uKdtz/hxt27Uy8DKFln3uuX02y9+k3m10sKZBX9ZRMw=
Subject key identifier: A2:C5:AD:88:4A:2D:2B:0E:9E:3B:90:F1:AC:95:F1:73:18:C6:F6:FD
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 0199FBEC0D487E16C3F241271AF082060B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: K+SdzH6fhFtCREaYh+wutiauscq1hveGNy2Thz+sUUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0d:48:7e:16:c3:f2:41:27:1a:f0:82:06:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=a2c5ad884a2d2b0e9e3b90f1ac95f17318c6f6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:83:81:5a:42:29:76:dd:3e:70:56:be:07:
b5:de:e1:7a:28:44:dc:91:90:6f:c6:43:2d:1f:e3:
63:37:13:79:84:08:b4:69:fc:22:58:3c:b6:e6:69:
3c:44:83:d3:12:c3:08:0a:81:7f:6a:5a:40:cb:82:
e9:70:f3:15:31:4c:df:71:e6:31:97:41:db:4f:62:
ac:ba:34:69:3f:8e:e6:90:83:e9:ba:60:45:15:35:
83:6f:31:ed:cc:1a:83:b9:5c:49:96:dc:37:d4:4e:
ed:2c:06:23:63:3b:d1:5e:e6:99:63:7c:62:8e:1d:
0b:52:69:de:f0:57:f8:31:54:84:73:4b:13:a3:73:
3e:f5:c5:a1:ac:55:70:81:5e:79:2b:28:c2:ba:14:
b0:83:f6:45:1e:a8:ac:ac:c4:08:63:f5:f7:b4:d4:
fc:4e:fc:3d:26:8b:22:08:4c:ad:ae:4e:42:2d:14:
42:e5:95:3f:91:33:25:75:1b:2f:0e:50:fb:d8:89:
ef:d3:dc:fa:7e:a1:23:66:11:e8:ac:19:92:28:55:
6c:34:f0:ed:86:16:2d:a4:16:ab:38:e7:a6:07:49:
60:54:17:d7:c6:5a:19:12:61:18:d8:4b:bd:c8:70:
9b:7c:55:f9:f1:09:7a:52:20:43:a6:19:d8:3d:5e:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:AD:88:4A:2D:2B:0E:9E:3B:90:F1:AC:95:F1:73:18:C6:F6:FD
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:74:bc:63:27:d3:b0:a0:ed:be:bc:06:51:cf:09:f8:ab:
73:2e:7d:41:13:b7:e9:89:63:5a:1d:a2:70:1f:2c:e7:2a:bd:
12:58:fe:2d:c5:33:0e:ff:56:ab:f2:a5:f1:d1:7f:40:db:98:
de:12:a1:12:72:65:5a:e4:5b:3f:4d:0e:cc:e1:19:ac:56:5e:
00:28:4c:f6:35:87:b6:43:2a:d4:eb:0d:5d:64:ed:41:25:13:
53:5e:d9:bd:c3:1d:cc:fc:b1:b9:6b:fd:50:b1:49:bf:4f:f9:
54:07:50:36:aa:20:a6:b5:79:3e:42:97:3d:f0:94:0f:9b:b5:
8d:35:70:ff:66:a7:88:e7:c5:54:a8:b2:b8:81:06:e4:32:0e:
dd:94:1b:54:be:88:0b:b6:a9:ff:cd:15:2f:64:6f:2a:99:2f:
4d:cc:86:51:af:95:b6:68:01:ba:ef:2f:11:65:ff:38:64:00:
6f:f8:44:a8:39:32:d6:87:c8:03:c4:ef:a8:34:4a:de:e1:85:
76:54:ee:e0:52:8b:be:7a:ae:db:57:ef:4d:df:cd:70:1d:74:
ae:48:60:a9:92:af:20:4b:7a:25:6d:c1:7d:56:f7:f5:7f:4e:
60:69:10:bd:af:72:ed:35:2b:6a:42:92:a4:a2:a8:3f:ad:62:
cf:c8:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:28 2025 by rpki-client