Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: jyT2RffTKI4YQ1gssKJuvdyH9fcp0UUrTJLtpXcw7PM=
Subject key identifier: E5:E1:8A:C6:4D:CF:8D:E0:82:E1:49:D5:3B:71:0C:F9:39:08:50:D7
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 0199FDD9495206951F1BBE1F83DF97EF98B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 0218
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: ciMNRKnbsBMyVqtHlgHi5ZxnCSLvms7bFiriRGQ2Rvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:49:52:06:95:1f:1b:be:1f:83:df:97:ef:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=e5e18ac64dcf8de082e149d53b710cf9390850d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:14:31:7f:ec:cd:63:69:fb:63:ed:7c:1c:
35:9a:75:fd:8a:4e:c5:53:3c:0c:de:06:f6:f2:ee:
34:ce:79:8b:a9:b8:18:49:94:47:e2:64:eb:09:e2:
16:58:c0:e4:b5:4e:ca:7e:73:9d:38:ba:89:18:d3:
bc:74:33:37:42:a3:fc:d5:aa:ed:86:7e:16:87:f5:
e4:d3:d8:64:a1:e6:ff:a9:22:fe:92:b2:61:83:9b:
ec:13:63:44:6a:e4:62:d8:4f:93:60:6b:0b:28:9d:
87:11:0f:fc:d9:96:04:a1:e6:26:58:bc:20:f0:c0:
93:5c:5d:89:91:41:5c:12:2d:9c:ef:62:51:24:cd:
56:c7:03:59:7c:07:4b:3b:05:84:7a:a8:62:a9:ac:
79:dc:09:37:4c:05:0d:45:13:a3:2b:d7:cc:61:19:
2f:b0:30:08:7c:00:2d:be:2d:43:04:08:b8:a4:97:
94:08:d8:db:aa:24:e2:f5:60:be:9a:cf:d2:6d:df:
8f:e7:09:9b:f9:0d:ee:78:ed:55:4b:ad:71:27:2a:
e1:1e:c8:09:59:8d:41:9f:d2:93:da:48:18:62:97:
51:b0:4a:e7:43:52:86:ca:36:99:fc:d9:af:25:bf:
3b:b7:97:90:ba:08:38:10:dd:e8:c3:6e:26:8d:8f:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E1:8A:C6:4D:CF:8D:E0:82:E1:49:D5:3B:71:0C:F9:39:08:50:D7
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:43:39:de:f1:b6:2f:25:91:0a:80:c4:e5:65:c0:50:09:78:
62:7c:f2:aa:15:c7:10:24:93:c8:c1:eb:53:53:d9:d2:0c:ed:
b0:36:95:42:9b:02:9f:f9:64:1f:08:ca:e1:3f:0b:14:a0:d5:
ce:ba:dd:9f:9f:c4:4b:44:55:23:39:43:b1:26:7e:18:4c:08:
5e:06:de:46:a0:37:48:62:aa:23:ac:c4:5b:7c:85:ae:5b:e7:
13:c1:74:5b:25:46:43:7c:6c:3d:ca:1c:5b:a6:b2:86:ce:b1:
c3:af:0a:cf:c5:32:15:e9:aa:d3:e7:a2:39:34:a0:e1:39:ed:
02:6f:bb:6d:b9:df:61:47:80:09:67:de:95:11:06:58:da:53:
4d:60:a0:40:15:85:21:28:6f:88:eb:66:eb:7b:e4:66:1f:c1:
7c:f5:e6:0d:53:11:c2:9b:f7:13:aa:97:8f:a0:b4:80:bf:51:
ba:5f:57:b5:1c:f3:1f:ab:71:94:7f:ba:11:75:81:e7:42:a2:
c9:dc:62:61:2c:c5:40:d2:4b:3b:4d:ee:30:7f:24:cd:b1:f6:
3c:de:8a:9f:7f:2f:f4:20:e9:a1:5e:b8:bd:e7:2d:aa:e8:dc:
1c:18:19:67:fb:9e:85:b9:95:bc:94:89:c5:58:4c:5e:c8:9d:
d1:ee:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:14 2025 by rpki-client