Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: bbHPuNIc94LnPTJUrKfvRfKvDG3qeT407+ZMXTvFc9g=
Subject key identifier: 07:D6:F8:A7:7D:03:32:B1:AA:2B:85:22:4E:98:3B:4E:4E:1C:64:BB
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 0199FBEB6DFCD4315AEBC808E8B4C3BD90CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: u6fwi86wSfBB5bJo9q4zKSYCwaGFZguvevxXih16vt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6d:fc:d4:31:5a:eb:c8:08:e8:b4:c3:bd:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=07d6f8a77d0332b1aa2b85224e983b4e4e1c64bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:a9:bf:65:c0:8e:11:7b:a6:86:5a:77:06:
b4:38:77:bb:cb:f9:d9:fa:7b:1b:b4:b4:d0:dd:9e:
22:7d:a4:2b:91:6a:dc:26:57:3b:7b:c8:0c:c9:bf:
34:d4:99:11:be:b2:ec:37:85:a2:e3:b7:9c:97:0e:
81:a8:41:c9:cb:92:eb:5b:d4:94:4a:9e:db:75:3e:
bf:04:82:5c:e1:01:ae:cb:2a:7d:5e:ef:96:9a:6c:
f8:47:13:3f:95:9c:da:e6:bb:a5:bd:ae:a6:05:99:
ea:16:b4:80:d9:2f:09:c4:1d:85:62:42:df:da:82:
63:3d:1a:ff:78:1c:86:e7:66:04:3d:52:2f:3a:76:
bc:b3:96:6d:72:4b:f2:49:3a:4d:36:41:af:b8:bb:
91:a6:8b:28:06:d7:7a:97:cc:27:b9:67:5f:89:46:
33:56:f9:5b:c5:57:e0:f7:73:f6:c2:21:a9:b0:c8:
db:d7:92:b9:a4:e8:ba:29:a5:95:97:ce:9f:27:93:
59:2e:4c:15:3e:a5:4e:a1:6b:72:09:a4:ca:a9:bc:
c6:84:e3:07:62:fa:9c:e2:c2:3a:75:42:96:f2:36:
7b:20:82:17:33:d0:b5:c9:26:2a:3b:2b:e9:1b:a3:
24:5c:51:4b:71:78:14:55:f7:ed:14:1e:01:6b:14:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:F8:A7:7D:03:32:B1:AA:2B:85:22:4E:98:3B:4E:4E:1C:64:BB
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a1:bc:99:01:80:5b:7e:db:bb:6f:9c:f1:79:44:cc:cf:a5:
b8:bb:e8:32:32:d2:01:03:82:28:94:62:51:f2:32:14:d5:c8:
f2:6f:24:0b:b7:84:d9:a2:68:99:d2:c5:18:79:13:3c:a8:10:
8c:82:62:ab:88:aa:15:72:d4:79:c1:80:29:63:b6:40:17:24:
cb:2b:64:93:03:3c:41:b4:13:b0:70:80:2e:a2:57:99:c9:92:
ee:98:63:b4:9e:29:5b:8b:e7:8a:a0:b0:ff:2b:62:29:9d:89:
4f:d4:23:99:2a:cf:64:0b:14:5c:21:eb:9f:49:3b:64:48:44:
7d:25:b2:d6:6d:a7:e5:58:a2:1e:47:9c:51:07:e1:3e:b2:d3:
31:94:2f:09:77:7b:32:c1:ee:18:41:74:73:84:35:8c:78:e1:
bd:74:83:a8:94:6b:18:f6:75:0a:cd:1c:7c:28:bf:e0:bf:93:
2a:41:f2:09:ab:74:88:a5:b7:8a:75:1c:78:a5:92:09:6e:8a:
2f:e5:bf:a4:c1:37:b1:e4:26:62:7c:e8:4f:4a:d4:06:a3:a3:
75:00:3c:a8:39:01:89:ab:1e:75:3e:62:dc:be:11:b8:ea:e5:
23:76:16:73:93:ed:c3:dd:24:d5:b3:ee:15:36:db:f8:a9:50:
32:99:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:32 2025 by rpki-client