Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File: vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier: piu+KlutuyqUDXoaqav9wgpUnJbVvOT1v2PfW6coJU0=
Subject key identifier: D2:E3:F3:4F:31:99:0D:AF:7B:8F:61:AB:C4:AD:79:CA:A2:34:7F:89
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer: /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial: 0199FDD9D503C9ECFBDC0310061FE6F167EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:15 +0000
Manifest this update: Sun 19 Oct 2025 19:02:15 +0000
Manifest next update: Mon 20 Oct 2025 19:02:15 +0000
Files and hashes: 1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: 0/0q87citYd9BLVPxKRprG72gIZrbHcQlLXYMFj/Rrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d5:03:c9:ec:fb:dc:03:10:06:1f:e6:f1:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
Validity
Not Before: Oct 19 19:02:15 2025 GMT
Not After : Oct 20 19:02:15 2025 GMT
Subject: CN=d2e3f34f31990daf7b8f61abc4ad79caa2347f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:23:20:38:8e:0b:9c:b3:5a:6a:27:84:02:
f5:3f:f0:d1:4a:23:f9:a7:60:eb:61:d5:11:6d:a4:
07:97:cb:da:f4:68:ce:f6:55:49:31:19:f6:09:7f:
8b:cd:fb:d9:93:0c:70:02:1d:af:71:2b:20:9e:d8:
45:74:a0:56:56:16:03:61:ff:7c:c5:8d:3c:89:5f:
87:bf:14:59:24:4d:c9:09:78:75:55:e8:61:61:04:
50:75:bd:15:2b:06:3c:0d:83:c6:15:8c:c8:0e:ef:
01:30:05:e5:90:86:3c:f8:8d:db:fd:01:6e:45:ab:
04:78:8e:2b:56:57:21:67:b1:7a:53:66:fb:e0:40:
6f:8f:be:3f:7d:3b:de:de:a8:d4:54:17:ff:49:92:
31:ae:69:f2:98:ea:e0:32:ba:3d:a0:6a:ce:0e:c3:
f7:48:bb:ab:48:a1:cd:2a:3a:9a:7c:f6:38:5a:15:
b1:46:50:df:b9:b9:3f:3d:2b:83:f4:a4:f6:bc:56:
81:05:da:57:ff:c2:4d:d6:eb:95:dc:a2:b6:85:f1:
9c:30:54:25:4d:41:29:61:27:f9:ac:d1:07:10:fe:
0a:2d:a8:72:77:f1:4d:91:a9:c4:77:a5:d1:6d:f3:
85:61:48:5d:ba:6d:54:0d:5d:5f:67:13:5f:22:02:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:F3:4F:31:99:0D:AF:7B:8F:61:AB:C4:AD:79:CA:A2:34:7F:89
X509v3 Authority Key Identifier:
keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b9:1f:f0:17:03:9f:38:ac:f5:5b:90:32:5d:b5:06:38:56:
16:49:b3:68:fc:aa:b6:32:74:1e:e9:d1:dd:67:2c:f3:8e:a9:
c8:09:d8:b3:cf:f7:60:61:7a:df:65:0a:d4:fc:74:66:53:a5:
75:57:af:e5:bc:ae:24:f5:b3:cc:3b:94:12:e6:bb:22:e8:75:
48:d2:5c:0a:14:fb:98:9f:65:90:da:d6:70:ad:f5:a9:35:5d:
a8:9e:dc:fa:ed:91:64:78:53:5f:fc:1c:f6:e5:e9:83:eb:e3:
37:ab:6b:63:b9:8d:ca:36:c0:ac:27:23:cc:6f:61:d3:01:ab:
e9:79:6a:5d:f2:4c:df:76:63:e1:57:26:45:8a:4e:bb:74:8e:
30:0f:73:11:8d:af:da:94:9a:70:d7:ef:ef:b6:64:4d:0e:c0:
ed:f6:d7:ff:a1:e8:35:f3:6a:42:70:33:a0:ec:19:3c:54:05:
c0:99:0f:00:79:02:7b:51:d3:a8:b5:ac:ab:41:62:5c:a8:15:
da:41:eb:c5:6d:25:95:24:9e:b5:75:ec:c8:a9:0d:0d:e6:34:
ad:30:64:c6:4b:93:84:b0:40:1b:8a:bb:e8:37:bf:bb:30:40:
fa:85:da:fe:ee:c6:b2:5e:ab:dc:75:d4:a8:a2:5d:be:c7:bb:
db:53:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:46 2025 by rpki-client