Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
File: vNgzeodIrlhibqk9my9YmNAY3fE.mft (raw, json)
Hash identifier: M6yfcjVf/H/10eLVrKDXXC2RwBdRNlpYbOiK3WNYSG0=
Subject key identifier: 8E:99:66:87:EE:AE:28:44:17:19:88:98:58:83:01:A0:68:9B:83:9E
Authority key identifier: BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
Certificate issuer: /CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Certificate serial: 0199FCC6485C43F4B136BA0CC3019888043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: vNgzeodIrlhibqk9my9YmNAY3fE.crl (hash: s5pjpkNPartpwP5MXg5wKylH6w5GsgHEP0yh+psfiEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:48:5c:43:f4:b1:36:ba:0c:c3:01:98:88:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=8e996687eeae284417198898588301a0689b839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:76:ea:2b:e8:dc:d8:20:eb:2a:53:b4:c2:
06:ee:2f:6c:ef:11:5d:13:a3:91:d1:d2:15:8d:98:
a2:30:e9:2a:59:a8:cc:e5:2c:49:0f:19:33:9b:8e:
03:17:87:9f:49:94:92:48:7a:56:3a:f3:90:a1:d4:
26:44:ba:ee:cd:dd:d4:cd:1c:c1:4b:63:42:50:58:
88:c5:59:57:f1:7c:02:80:3a:27:55:8b:7e:06:8c:
82:06:31:3a:4b:ec:e9:3c:85:f0:56:81:20:e8:85:
35:73:c7:18:d1:91:02:00:07:99:08:f9:cb:91:8b:
d2:b3:c9:3d:fb:4e:8d:24:dc:b8:c0:db:c0:0d:ba:
af:1a:53:c1:d1:58:b6:e5:ad:65:68:2f:6b:0e:d8:
be:f0:5c:3c:aa:f0:2b:c2:2d:6c:a9:f0:58:3a:37:
d0:a3:99:ec:d2:01:a8:7f:32:e4:1f:6c:7d:3a:56:
02:0c:c0:52:5b:ad:a9:43:44:1e:de:16:e2:69:81:
82:15:39:32:00:7c:75:e4:46:7f:20:41:4a:0a:ef:
51:b1:fa:67:ef:fd:63:29:3c:f7:8e:ac:ca:b6:07:
a2:9d:0d:94:84:c6:fb:6a:16:a7:7c:b7:af:c9:42:
a7:f9:00:b0:71:fa:31:bc:b5:36:bf:34:f9:33:7f:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:66:87:EE:AE:28:44:17:19:88:98:58:83:01:A0:68:9B:83:9E
X509v3 Authority Key Identifier:
keyid:BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:7e:3b:9b:c0:b9:71:21:61:6a:b0:92:c9:da:da:88:bb:
6f:bf:ab:39:e1:2b:83:6e:61:fc:c8:2b:1f:0a:c7:28:6a:dc:
88:25:12:24:e7:58:c8:9c:59:be:ec:bf:a3:c0:83:5d:c0:21:
0e:2f:5f:d8:64:0c:28:d9:7b:44:83:1b:06:f7:ce:73:3d:36:
d7:1e:35:eb:e3:83:72:50:04:4e:41:b7:09:14:3b:14:d0:c8:
73:cc:f4:cf:4e:00:bc:a7:5f:58:43:0b:ea:88:89:fb:13:34:
0a:88:90:47:7d:35:7b:e2:bb:60:03:f4:bf:44:59:62:44:e8:
0c:05:f3:5c:40:82:67:88:92:1b:32:f8:f8:7b:3c:ab:8f:70:
70:36:6b:ba:9b:3f:f1:cd:04:4f:77:2a:1a:f5:98:7f:8a:2f:
90:87:65:b9:6b:c2:17:31:c6:2c:13:7d:a7:e8:93:58:0c:94:
b4:c1:10:6b:3a:13:a2:0c:7b:3b:c4:a1:4e:f4:02:a8:de:b6:
c3:98:28:6b:75:c7:25:ea:d5:49:d2:01:0e:c3:e5:f3:47:29:
ee:11:0a:99:ac:e4:8d:96:fb:ff:df:45:95:9c:a4:57:00:8d:
b6:8c:17:07:38:2a:40:e3:2e:1a:bb:76:6e:e6:ca:d3:27:f5:
75:bd:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:14 2025 by rpki-client