Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json)
Hash identifier: tc1VJVlUbTahv57/jyZGDCFb4ADn9UP/kJldNEXMp5M=
Subject key identifier: CD:D8:4E:68:B7:7F:46:90:D1:BF:09:93:E9:BE:B0:AA:0A:94:EA:60
Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Certificate serial: 0199FBEABF3A5B406EC5A27B5725697B28CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: aA1zn+4X92rSssT6/awnnBjju/KmN6g2b41vVcKZ0R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:3a:5b:40:6e:c5:a2:7b:57:25:69:7b:28:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=cdd84e68b77f4690d1bf0993e9beb0aa0a94ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:d3:f2:68:00:f5:0c:72:31:6a:d8:45:3f:
f5:e1:67:88:86:9b:d4:b6:f3:f7:33:e8:06:24:1c:
1b:e0:7b:32:f9:0f:78:a5:0d:f0:19:41:aa:40:91:
5e:d5:43:36:7c:df:26:79:64:81:90:9f:40:e0:5e:
0d:ee:3b:1c:86:04:e8:d5:fa:42:3b:d6:32:4d:5d:
6d:92:18:09:d8:f0:93:cc:70:8f:2d:20:92:89:3e:
53:51:01:7d:79:d4:39:e9:ae:c6:d1:5e:a4:61:e9:
4b:8b:35:95:f1:e8:ad:0a:0a:1e:94:d9:f6:41:32:
93:90:e4:33:bf:1f:b8:1e:f1:75:69:ce:61:7f:b5:
74:2d:52:cf:8a:a8:64:3f:6f:94:6c:75:c7:0c:c8:
54:86:ae:12:c0:4a:25:4d:74:a2:17:38:de:81:d6:
61:ea:88:2c:cd:f5:90:77:c6:94:bc:c8:dd:8b:32:
22:72:7c:a3:50:28:df:dc:b7:cb:38:5c:eb:7f:94:
b8:f5:9f:17:b2:31:a0:2c:d3:77:da:40:06:71:84:
b0:32:20:fc:02:31:c2:ce:db:c2:d6:17:a8:3d:e5:
0a:1a:13:2a:ba:b7:99:c9:48:41:02:56:9f:ad:e3:
10:49:9c:6d:f5:85:f8:01:19:6d:46:a4:62:14:ea:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:4E:68:B7:7F:46:90:D1:BF:09:93:E9:BE:B0:AA:0A:94:EA:60
X509v3 Authority Key Identifier:
keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:f1:ea:cb:80:e1:bf:a7:22:0b:6b:3b:20:c8:0f:cf:70:
3b:e1:c5:2c:c7:db:7c:4e:be:b9:48:b9:1c:37:76:51:88:3a:
2b:b6:33:dd:6d:d2:54:1d:1d:62:d2:96:a1:79:5e:c6:bf:cb:
86:7a:b4:8c:cb:b2:38:7c:e3:a3:16:f1:a2:f8:1f:4e:b6:55:
bd:d3:01:9d:6f:13:b9:e2:7d:e8:4f:f3:77:dd:76:3b:d0:ff:
39:05:2f:7a:3d:f0:f8:fd:00:d0:88:a7:e4:ec:0a:0b:d0:21:
a1:9e:20:3c:54:d5:f3:a1:81:27:f3:95:91:e0:23:32:66:a6:
37:aa:44:b1:0d:a5:bd:a0:c7:8c:27:14:2b:76:db:82:c9:96:
09:f8:0e:20:5f:9c:b3:e4:5d:49:b3:48:b2:9c:28:6f:be:11:
2a:c1:bb:a2:1b:e4:c0:2b:f2:8b:26:19:4b:53:63:20:82:d8:
71:54:1e:88:e6:6f:36:22:7d:36:b9:0a:64:0f:7d:7b:29:66:
d5:cf:06:7c:52:8d:18:e8:00:d1:4b:98:c4:74:d5:9f:f0:18:
2f:15:05:fc:28:ac:7f:60:27:88:b3:7d:e0:9a:f0:93:c9:6e:
50:c2:44:21:64:ba:ae:8f:e1:cb:43:e5:a8:2f:81:c0:94:7f:
0e:d9:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:29 2025 by rpki-client