
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: QHodkVKL6n0dm/m608TE3ZwniOkwF48G99jH2SbzEcM=
Subject key identifier: 13:AC:28:87:0B:84:BE:D1:66:98:A2:CC:6C:1C:47:A7:B9:D1:F1:4B
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 0199FC58EAE8423C8FEF1EF600F4814104DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0C17
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: 4nT9YlfJLzg5JFo1SH7raHsJgFm0yreqWruT68vUpqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ea:e8:42:3c:8f:ef:1e:f6:00:f4:81:41:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=13ac28870b84bed16698a2cc6c1c47a7b9d1f14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:c6:4e:c3:ea:bc:cf:88:93:1f:4c:d9:31:
b9:aa:b3:e2:30:dd:15:a8:e4:c8:f1:0c:2e:f3:75:
ef:c9:3a:11:a6:06:48:e6:45:1e:76:04:ac:d2:10:
cb:2e:37:26:6b:34:53:c7:48:23:d3:2c:f3:ba:e0:
72:14:53:6d:70:1e:00:54:74:8d:cf:2c:1e:73:97:
0f:fa:02:80:28:dd:97:06:4a:14:f9:1a:b3:2b:c9:
db:12:e2:b1:88:35:3d:74:c1:93:13:7a:1b:8d:78:
3e:44:03:3a:ad:b6:fc:df:08:dd:0e:ca:2a:f4:4f:
54:68:0a:be:9e:c9:ca:46:9f:a1:7e:0e:2f:ae:f7:
fb:64:53:5c:20:40:37:30:3f:0b:ff:1d:47:a3:f5:
94:3e:16:55:89:22:58:b1:33:3e:83:c5:30:7d:ea:
cf:ab:49:c2:c3:24:e1:e8:ce:56:ab:36:d4:79:87:
aa:bf:8d:1a:f5:8c:f8:82:33:12:48:8d:86:52:09:
2e:66:f0:68:9f:bc:f8:fc:9f:42:87:42:b8:3b:02:
fe:bb:e3:3d:3b:45:fb:cd:89:95:fc:1b:f0:dc:60:
b3:6f:d4:2b:f7:ed:48:a7:ca:bc:da:1e:86:f8:c3:
d1:12:1b:2d:03:26:d5:78:6f:ce:8f:48:e4:01:a3:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:28:87:0B:84:BE:D1:66:98:A2:CC:6C:1C:47:A7:B9:D1:F1:4B
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:be:77:59:2f:29:b4:b5:29:e0:33:38:b3:98:11:fe:f7:9b:
1c:27:3b:05:88:cc:0f:4d:b8:bf:10:10:f4:48:05:af:c7:78:
c0:2c:24:8c:da:89:c8:ae:d4:6d:21:55:4c:2b:45:45:ca:7e:
25:bd:9d:c7:ed:e9:d0:8f:3c:c2:2e:86:4f:93:7c:07:e7:78:
d9:b9:68:f4:26:d5:69:82:c7:68:6d:b5:5f:8b:53:d6:c1:de:
43:bb:43:34:11:ce:76:b7:af:bd:33:6e:d1:fe:f5:70:92:19:
e2:eb:86:48:44:c9:7e:ba:3c:67:9f:2c:10:c1:18:d8:10:55:
ff:40:60:56:ad:77:f9:61:7e:cf:37:b4:f7:cd:03:62:e0:0b:
2d:c9:97:a9:bd:e5:ea:83:f7:ca:fb:96:f5:3b:96:35:29:97:
63:6f:41:cc:29:a0:f3:18:eb:f9:93:aa:c8:a3:02:33:0a:c2:
f0:b0:ed:e7:94:05:5a:5d:8a:b7:fb:e3:bf:40:fb:28:d0:12:
dc:08:3b:9b:26:fe:6c:f7:ef:d6:92:90:17:2c:e7:95:b6:04:
2a:1b:8a:0a:b5:da:56:03:3e:de:3c:8d:04:80:8b:d2:52:7b:
b1:13:55:f5:a7:74:6a:db:83:bd:1b:f3:ff:25:b4:33:ae:69:
ab:bf:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:50 2025 by rpki-client