Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: IdYOdHIO17907eW9o2ReJBVp9E4EkMMSMlLqb7oqcpI=
Subject key identifier: B8:EE:51:53:EF:F9:5B:6B:45:CB:35:C4:F0:F5:36:F1:B7:55:8F:47
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0199FDD8E127F87B1F21144A321594FEA30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 125D
Signing time: Sun 19 Oct 2025 19:01:13 +0000
Manifest this update: Sun 19 Oct 2025 19:01:13 +0000
Manifest next update: Mon 20 Oct 2025 19:01:13 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: EbmOhZt11Cy6wzcotu+HDYud1KrNgfcuO8bOllN9Sbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e1:27:f8:7b:1f:21:14:4a:32:15:94:fe:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Oct 19 19:01:13 2025 GMT
Not After : Oct 20 19:01:13 2025 GMT
Subject: CN=b8ee5153eff95b6b45cb35c4f0f536f1b7558f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:99:a5:16:b0:3f:7e:31:02:d3:39:02:43:
12:0d:51:86:e3:52:d6:5e:eb:3a:fc:91:a3:9d:78:
59:a8:a2:da:7a:7a:d2:27:f6:8c:2b:d6:e0:76:be:
60:05:12:54:0b:58:20:fc:de:ec:cb:4d:56:b7:c4:
8b:45:a3:00:bf:23:fa:81:85:f6:3a:c0:cb:94:44:
02:f7:84:c1:37:68:ac:6d:f8:32:3c:63:6c:22:12:
05:5d:43:67:5a:ee:f4:16:9f:60:2e:2a:a9:80:4d:
d7:ec:11:a0:ec:db:44:83:70:ac:a2:af:3b:6b:b8:
f0:cb:fd:45:8f:0e:14:84:60:8a:0d:80:2c:82:07:
c8:ac:2a:1e:20:82:d7:a1:a4:fb:80:1a:45:fb:7e:
03:30:b3:55:e2:86:2a:41:91:4c:4c:95:a3:df:21:
78:7a:a8:1f:32:fc:7e:39:65:c1:6e:37:36:c9:b2:
88:fc:f6:10:2f:a3:6d:fb:46:3f:5f:8e:45:ee:e5:
8f:6d:5f:8f:97:3d:c2:36:bc:ae:7a:b2:63:f5:ed:
39:03:8e:88:6b:8a:ae:f8:64:27:a0:48:4c:1f:65:
f9:92:b0:ab:e0:62:b8:96:18:6d:36:be:c9:ff:07:
65:24:dc:83:12:f6:21:6b:22:aa:b0:20:05:fd:f4:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:51:53:EF:F9:5B:6B:45:CB:35:C4:F0:F5:36:F1:B7:55:8F:47
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:4d:a1:0d:63:3f:0a:20:e9:83:36:5b:bb:82:1f:e6:39:
33:91:a8:a4:13:17:11:16:6b:73:32:8e:1f:08:4c:82:0b:2d:
7d:f6:59:7d:9d:0c:af:c8:98:6e:d8:34:03:e0:bf:b9:2b:1a:
8a:c4:90:4a:29:42:a7:27:27:1e:61:8b:26:b9:90:b6:ce:4a:
03:86:33:74:e5:2b:82:bb:e5:f9:58:2b:e1:2a:2d:75:85:26:
18:70:db:29:b3:87:c6:49:17:51:1e:78:da:f0:42:43:bd:c7:
d7:54:57:a0:0c:da:ae:f7:74:ba:fc:12:0d:3b:5d:02:2e:e6:
aa:0c:41:44:9a:45:9c:2c:42:48:d8:e8:fa:63:81:e9:98:ef:
73:84:3c:9d:00:aa:69:86:18:d3:b3:90:67:35:66:af:ea:8e:
b6:0a:f8:2f:69:ac:ab:9d:d6:ef:4b:b8:8d:d9:4c:87:eb:2a:
fe:dc:a9:97:2b:7b:49:a0:9e:6f:53:1a:fd:16:5d:82:ad:08:
e8:e6:84:a5:08:7e:13:4a:90:fa:ff:88:83:d6:14:89:ee:69:
18:bb:61:20:e6:57:d5:dd:1f:18:73:03:9e:e0:f1:6c:16:e3:
7d:8f:bc:e4:6b:81:af:47:e7:d8:73:84:c5:9e:d5:10:38:9d:
0c:c0:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:50 2025 by rpki-client