Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier: Hx+ZVwKuSt4ZnImL+v+869um9XAE0v2ihw0N2odc8ec=
Subject key identifier: A8:85:78:ED:6B:67:21:73:6A:F2:83:20:3E:70:86:25:02:09:37:67
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial: 0199FBEC4B31EA30D620573CE06D170EA083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number: 0B4C
Signing time: Sun 19 Oct 2025 10:03:10 +0000
Manifest this update: Sun 19 Oct 2025 10:03:10 +0000
Manifest next update: Mon 20 Oct 2025 10:03:10 +0000
Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: KXkAGvq0VOTVrovrae/3liFcLRbuIJ4amqdJtM0qUqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4b:31:ea:30:d6:20:57:3c:e0:6d:17:0e:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Validity
Not Before: Oct 19 10:03:10 2025 GMT
Not After : Oct 20 10:03:10 2025 GMT
Subject: CN=a88578ed6b6721736af283203e70862502093767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:dd:65:04:09:35:50:e5:52:fd:4f:d1:12:
24:f8:6a:ea:46:99:b5:56:d4:90:64:5f:94:21:6f:
00:cb:3a:0d:2b:c2:ff:28:5f:5b:67:f5:9c:37:3b:
79:9e:69:02:9e:08:60:93:75:78:35:24:24:6a:a2:
30:b1:35:4a:f4:93:2d:db:17:a2:6f:7c:47:5a:47:
de:b2:d2:4c:ff:b8:f7:60:ed:20:37:39:ce:2b:54:
fb:d7:a2:04:df:ca:15:31:c9:2f:4f:ef:2c:d0:85:
08:94:b5:2e:7b:5a:9c:17:07:22:8b:29:51:92:cd:
a3:81:c0:8a:0c:d4:56:d6:59:9e:c1:0f:06:e6:be:
ab:74:3f:9e:67:d4:1d:97:c8:da:0b:9a:c0:ba:39:
5f:39:64:7e:1f:3f:6c:6f:38:c2:48:f4:18:a2:48:
2d:bc:e7:ee:b4:f9:0c:04:62:21:51:5a:6c:4b:ae:
45:bf:31:74:16:d2:cb:9e:f4:c9:b9:8d:23:1d:ea:
50:07:e1:af:f8:51:13:4e:38:8e:d6:c7:a0:12:85:
fc:45:88:0a:52:46:61:12:5f:27:c2:74:62:5c:16:
c5:94:4a:08:3e:99:29:de:a1:d1:40:08:0c:c6:a3:
65:37:16:54:f4:86:47:eb:13:67:a6:20:58:b6:c0:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:78:ED:6B:67:21:73:6A:F2:83:20:3E:70:86:25:02:09:37:67
X509v3 Authority Key Identifier:
keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:bb:b1:7f:b5:3d:e8:8a:2f:da:c8:2f:95:77:88:82:99:5f:
91:7e:d7:48:20:ad:7e:9f:80:e1:d3:0b:8f:20:c8:16:c7:3d:
5f:0c:c8:f1:18:6b:3a:80:d7:5b:54:0f:28:14:df:d0:2f:7a:
88:69:19:a3:a7:79:10:6e:c3:79:17:6e:83:90:0a:ae:5a:a6:
1f:2e:f2:32:c7:e6:a4:86:2c:c9:5b:ec:05:99:6e:0b:37:d1:
68:e4:0d:6f:6e:16:e3:39:db:5e:4a:88:3b:a8:57:be:2a:66:
05:ee:16:10:ca:ba:2a:9e:3b:02:73:d7:af:e5:96:c9:cd:f9:
07:2e:d6:74:dc:6b:ba:d1:27:bf:ee:68:77:fb:29:4c:97:6a:
79:e6:df:97:ba:b2:cd:40:33:80:57:23:77:67:49:29:ae:a4:
f7:fe:5c:a0:5d:17:a8:e0:c5:00:56:39:05:7a:00:7d:b0:51:
04:0a:40:59:a5:bb:1d:72:57:27:d6:d0:0d:28:b4:99:d2:a1:
3c:4d:cf:2e:9a:c9:5a:b9:61:a0:3a:f6:1e:c5:b5:11:0d:5b:
f1:3b:61:e4:2f:a5:2d:94:79:10:29:b6:50:01:0f:b2:46:58:
88:1d:c7:e6:89:78:b4:f2:25:35:a8:fe:86:2b:a5:f9:c4:6a:
61:cb:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:11 2025 by rpki-client