Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: rakQQ8zWlHSd85otZRrV8XcG7KIjUmm4fDk6TBSZYqo=
Subject key identifier: 0B:B1:0B:FC:7B:93:A7:AE:73:13:A7:86:10:7B:05:70:C5:98:B2:D5
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 0199FDD9DD2ABDBEDE93FC8ED313E1B5976C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 07CC
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: fWzM1BVD1dJwHTtJBx3IFHSzmfSLXysUcO5PL3oO1+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dd:2a:bd:be:de:93:fc:8e:d3:13:e1:b5:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=0bb10bfc7b93a7ae7313a786107b0570c598b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:65:03:fe:c4:d6:eb:2f:ca:25:67:6e:a1:
19:20:69:ba:7b:8a:f9:7f:4f:e3:08:e0:73:32:9d:
4c:38:05:5d:96:72:f3:f6:bb:4b:9b:2e:25:5b:55:
48:d6:d0:98:44:57:a8:b0:2e:59:e9:e9:f2:b6:34:
7a:7a:fb:2a:f1:ff:4e:90:a0:f5:56:69:0f:c0:e8:
f6:01:d9:47:96:3d:7d:67:48:9d:19:48:a4:9a:57:
bd:2e:71:14:ca:c1:dc:33:d1:b2:50:d2:d8:27:f8:
10:a0:d8:c6:4c:14:56:04:66:0b:69:fc:cc:8c:04:
52:cd:5a:79:08:ce:50:71:fe:2a:cf:13:f7:88:b6:
57:52:90:a4:43:e2:71:38:92:04:c1:6c:2d:b8:95:
f3:c5:32:de:a6:bf:e1:f1:02:9b:c1:a9:d8:64:99:
cd:61:cc:7d:46:81:e7:53:98:4c:59:4c:8d:5f:8b:
3e:3f:05:f3:91:55:4f:06:43:8f:24:d3:24:4a:c9:
85:44:37:f1:2b:9e:30:d7:9a:ee:d6:25:50:93:10:
b1:03:f6:50:d1:8d:1b:ba:c1:d8:e0:3e:9c:67:8d:
08:42:3b:ee:39:d0:f2:b0:24:37:7b:fe:be:58:38:
20:74:eb:96:ee:9e:93:89:c4:e6:92:a7:8b:83:d4:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:0B:FC:7B:93:A7:AE:73:13:A7:86:10:7B:05:70:C5:98:B2:D5
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:5d:cc:37:3e:bd:0e:71:2a:de:d7:a7:a8:87:59:2c:e8:
18:04:de:bf:94:f1:c6:1d:1a:22:76:e2:45:18:7e:7b:67:76:
b9:75:cb:9a:4d:75:98:a2:3c:fe:a5:1d:4c:4f:11:0d:10:28:
eb:b2:55:2b:12:5b:83:68:02:e9:b9:39:39:1c:fa:15:e6:d4:
b0:02:ef:aa:f6:40:de:e0:26:09:c4:8f:12:88:69:bc:fb:fe:
9a:75:c2:44:73:7a:33:aa:d6:2e:09:5d:83:d0:b3:34:c8:0d:
bb:60:ca:71:b7:81:58:90:30:95:5b:8c:f3:83:ff:51:7e:78:
70:17:bc:15:79:1b:f5:2f:7d:62:59:03:61:7c:41:fa:2c:e2:
1e:f4:69:91:9f:34:95:d8:a0:85:41:da:8d:7d:da:18:20:c7:
c8:be:e1:f3:48:d8:42:27:d9:82:33:a7:bc:4a:3d:64:d5:5b:
27:a1:2c:81:78:29:9b:85:59:47:60:99:0e:a8:2f:24:32:76:
bb:ce:c9:73:41:cd:0e:fd:15:c6:29:13:42:c4:0a:1e:11:e0:
04:5b:7e:5a:30:4f:18:17:10:84:b0:e0:67:85:42:7d:38:a5:
da:e1:7e:39:ba:0d:3b:30:7a:44:a9:90:00:50:e0:33:29:1c:
58:ae:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:57 2025 by rpki-client