Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: hjr++VlFvT/LDyR3uie1I+y7apc2/t+uCxL7XZcT7k8=
Subject key identifier: 82:76:DC:C5:A8:B7:32:D9:67:94:A7:D1:77:23:C7:95:24:05:B0:F6
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 0199FD6B2519154D4ADA33360019CEB77F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: B9
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: XW7BxGn8gbPFymWeXuGoopzG9MguVxDRMFTTsMQk4sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:25:19:15:4d:4a:da:33:36:00:19:ce:b7:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=8276dcc5a8b732d96794a7d17723c7952405b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:cc:04:f6:3c:82:c4:a8:0a:b1:46:79:76:
7a:23:5e:f0:5f:ec:ab:9c:85:cf:21:94:31:a3:b0:
a2:fa:3c:78:c3:b0:d7:6d:0d:9a:f6:c8:3b:8f:38:
d3:35:a4:31:3f:5d:92:7e:7f:7f:50:ed:05:7f:fa:
71:b0:34:8d:c8:60:7e:a8:44:9b:74:84:9a:05:5a:
79:db:12:95:f1:b7:df:a3:21:2f:e8:17:15:01:dd:
be:1b:0a:1a:e6:25:61:a6:94:b7:35:b0:40:53:19:
ea:de:b8:7b:8e:31:e3:6d:b4:83:46:c8:6f:de:51:
c6:14:0d:bb:bd:3c:03:e1:0f:22:58:b5:05:9b:1e:
66:95:d3:9a:3c:02:55:03:d0:1f:9a:37:cf:df:01:
a8:a9:49:7e:7c:ea:a9:2c:ab:12:47:60:21:8c:89:
34:c9:10:f1:bc:0a:a9:9c:d4:ad:71:b4:02:78:f1:
ab:6b:21:c5:84:e9:f4:d8:f8:04:a9:7e:9a:8a:08:
9f:5c:f4:4f:03:15:86:8c:91:84:3f:17:9e:b4:af:
1c:09:95:94:0f:58:e3:ad:1d:4d:d9:8a:a7:25:76:
f9:2f:5c:42:cb:67:f8:e1:d7:c4:a6:3b:ff:0e:69:
8f:f0:27:6e:46:73:9a:7c:66:80:02:f2:b7:6d:b7:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:DC:C5:A8:B7:32:D9:67:94:A7:D1:77:23:C7:95:24:05:B0:F6
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:8b:9e:d4:de:cf:85:15:d8:d9:8e:76:88:6c:36:b2:7e:
1d:6d:cf:eb:81:73:ba:18:61:6f:44:03:d4:2c:1f:e4:dc:42:
e1:60:3a:8b:09:34:c4:62:27:81:67:d7:a7:98:b6:a9:7e:ea:
a6:b6:f2:2d:57:e8:79:37:87:a7:85:57:47:36:cb:97:db:f2:
31:22:49:46:15:17:1a:90:ac:12:ad:22:f2:e1:a1:7e:6a:69:
cb:58:6a:c0:2b:a6:fd:72:c0:c9:e9:fa:df:26:36:a6:76:b4:
5c:8f:f9:47:68:8b:cf:7b:46:8a:67:07:9c:34:8b:2f:b4:df:
dd:cb:02:f6:01:94:ac:5f:05:e0:60:39:d1:02:ea:0c:cb:7a:
5f:9c:fb:98:39:66:c5:e9:ac:af:70:2c:6e:98:5d:6f:21:5a:
8b:55:56:9b:68:91:08:7a:00:37:ab:fb:4d:98:ea:07:45:f4:
2f:7d:cc:78:98:b7:71:56:f1:0e:d3:2b:63:dc:87:fa:92:f4:
67:e3:0d:86:2a:d0:4d:ff:cf:46:e1:44:01:d7:fd:ec:a4:3b:
ff:ba:a6:b0:e6:98:24:36:25:df:e7:ab:6d:ba:7f:41:9f:71:
61:65:a3:d8:67:85:93:8e:93:5f:2c:ab:66:49:b7:ad:cd:cf:
c4:52:4e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:42 2025 by rpki-client