Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: HE1gPRbusM69H1rPBoq6bpznTV8rDdsoB58mTYiCSns=
Subject key identifier: F5:D9:B6:38:A3:77:F5:E5:F9:23:C3:09:4F:29:19:CA:31:CE:C5:2D
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 0199FBEABD1BD92AC027D0433D23C52FD84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 1168
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: bHWHkJCQCulBIAwK58gGwkWtqfucBjjAg91u+jSo7o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bd:1b:d9:2a:c0:27:d0:43:3d:23:c5:2f:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=f5d9b638a377f5e5f923c3094f2919ca31cec52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:23:1e:25:8c:e7:8b:9c:16:4f:36:5a:13:
6d:ab:86:e2:d7:28:34:c4:8c:65:bd:ca:42:11:d5:
d4:05:23:64:56:1a:43:9c:03:53:b6:ee:03:f5:e6:
43:bb:f3:37:23:d9:4b:66:aa:6c:59:11:14:fc:3b:
90:cd:6a:44:b6:de:da:1d:3c:91:92:63:ad:f9:bc:
47:58:15:d9:2e:82:43:39:b3:3e:fe:6f:76:ad:03:
b0:88:58:36:a0:f9:17:1b:c5:0b:ca:94:c7:16:2d:
19:bf:bf:e4:d7:ff:21:a2:a0:0f:dd:04:bb:b5:c5:
e0:18:ef:9c:4f:e7:2d:13:7f:2d:99:0b:7b:ca:68:
7e:f7:b5:15:16:a6:14:68:fa:3f:e4:84:27:95:72:
46:77:b4:8d:52:f8:90:00:c4:6a:75:9c:b4:ef:32:
74:04:9e:03:06:62:c2:09:d2:b8:00:32:11:ce:8b:
4d:f8:bd:81:2f:8e:21:ea:d6:75:b2:b9:d6:01:5c:
86:00:cd:cf:f1:4e:1e:54:d8:a6:ea:8f:53:b4:78:
75:64:e3:39:e0:9f:3b:96:11:2e:2e:5b:60:e0:df:
79:98:a8:bb:ca:39:f3:d1:f7:0e:66:91:62:9d:8a:
74:c2:55:6d:b9:6a:8c:fc:e6:21:3d:01:f4:f3:57:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D9:B6:38:A3:77:F5:E5:F9:23:C3:09:4F:29:19:CA:31:CE:C5:2D
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:7f:9d:69:28:b0:61:cc:79:ab:36:63:06:67:df:1c:e4:
b6:81:80:68:14:81:87:56:26:87:fd:63:0f:ac:4d:ed:87:f9:
26:d7:e0:de:8b:7d:38:4f:78:56:78:b7:fe:b0:26:a7:a5:5a:
de:89:6a:4e:7f:a4:21:8f:77:ce:f5:3d:01:8d:d8:73:51:b5:
3a:b8:79:c3:4d:90:a6:d6:15:bb:57:f1:5f:ae:cc:57:3d:f3:
35:c7:71:7c:49:25:df:d2:06:7f:1c:06:94:68:63:92:13:94:
1f:1c:eb:42:95:d8:bd:ec:b9:b5:0a:42:9a:dc:c1:fc:91:a1:
88:88:a7:25:31:81:33:b6:28:fb:36:b9:c1:2f:ee:17:61:46:
0e:6a:3b:32:78:62:ec:55:64:7a:cd:ba:5b:72:13:74:b9:d3:
88:99:55:95:ff:4a:03:81:73:b8:6e:e9:da:63:11:e8:9a:85:
fb:c4:cc:9c:e2:cf:39:28:d8:68:ed:0f:6b:43:62:c0:33:80:
17:2f:1b:bc:be:e7:32:65:29:88:cc:0b:b7:96:0e:ee:cb:2f:
1d:b1:37:aa:4e:40:aa:e6:56:16:b3:13:67:9e:86:89:f4:21:
cd:bc:36:86:12:a6:56:8d:43:da:32:04:16:cd:ee:dc:6c:1f:
d8:65:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:48 2025 by rpki-client