Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: Bq1EfJjc1W0bjVMrXTeLPvFRWfxf3IUBAgzJkuvDGGU=
Subject key identifier: 0B:6E:7C:B7:86:5F:BC:96:90:4C:AB:78:7D:93:EC:F2:B4:64:89:92
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0199FC218FC2F017ABF0CB2D741A4B04DFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 02D6
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: IMtOauqiyHyx885WsNzOgvk57AvIqwQ4lZOMAo1U+ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:c2:f0:17:ab:f0:cb:2d:74:1a:4b:04:df:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=0b6e7cb7865fbc96904cab787d93ecf2b4648992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:80:74:73:d6:5a:8e:c1:1e:83:e7:bb:cf:
68:0b:ef:0f:e5:c4:db:b9:68:34:89:4b:9b:02:61:
c7:9b:67:1c:dc:38:8b:7b:76:0d:bf:54:15:79:ac:
72:75:ca:87:8c:50:20:3a:7f:ba:f3:35:30:0c:49:
4d:6a:24:e2:7e:e4:0c:3f:e6:87:ed:78:e6:a4:2b:
01:b1:19:99:4d:58:b8:0a:79:74:28:8e:21:67:13:
fe:3f:4e:0a:6f:4b:eb:19:fd:d8:17:8f:bf:0e:63:
31:ec:c1:f3:87:05:38:fd:18:76:bf:ca:6e:3a:1c:
8c:fb:cc:b3:ff:ad:8a:6b:b2:57:3b:26:62:35:97:
e0:71:4d:aa:bd:ff:98:3d:25:81:35:1e:73:98:27:
b6:64:68:30:b5:06:81:b0:7a:1b:a5:9b:77:5a:34:
5f:b4:92:90:d1:3e:8d:04:3d:57:cf:a8:d8:68:f8:
f1:20:81:e1:af:ed:67:7a:79:18:cd:e8:68:c1:34:
b4:74:d2:12:d1:cb:1d:bb:58:ac:c1:d9:4c:2d:c5:
57:26:d4:62:7f:e3:07:9d:6f:a0:98:ba:d4:9d:40:
10:ff:51:6d:f8:f2:6c:89:1d:78:3e:d3:93:89:01:
8a:f3:ee:ea:9e:16:53:ac:d6:fc:3a:77:e0:8a:2b:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:7C:B7:86:5F:BC:96:90:4C:AB:78:7D:93:EC:F2:B4:64:89:92
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:01:fd:af:e2:0b:87:36:cb:96:eb:a2:64:62:fa:64:b8:
10:b9:23:1c:64:79:49:36:73:40:77:21:87:ff:c9:81:1d:7a:
63:5d:5c:cd:98:36:52:f7:72:fc:0d:df:21:77:da:a4:0f:34:
c6:2a:78:72:48:63:ba:69:70:87:76:20:7d:96:45:dd:5b:80:
fe:ae:8a:c1:96:72:45:b5:fe:34:94:47:8c:ef:6f:98:fc:f4:
18:7c:a4:b9:b1:03:7b:d0:dd:dc:16:cf:1c:11:f2:4d:5e:17:
41:fa:04:78:d1:45:a5:50:e4:ce:d5:9c:d9:c6:44:1b:23:d1:
ec:d0:4a:7b:42:8b:5a:0a:7e:63:55:02:3e:af:b7:f6:2f:31:
42:18:92:da:7b:bf:7f:8f:74:e5:ae:c4:a9:c6:2d:79:1e:8a:
05:30:aa:04:1e:21:50:4d:de:e9:03:36:96:44:88:18:ee:8a:
2f:c0:4a:a3:02:83:36:f0:da:53:04:f9:45:10:25:0f:46:55:
eb:16:14:a7:ab:b2:90:be:aa:be:94:ec:c4:92:9f:f4:62:5d:
32:8b:98:ff:5f:4d:03:2a:f3:9b:a8:25:cc:89:e1:ae:0e:03:
bd:7e:45:fd:c7:db:50:04:b0:73:b5:b6:de:27:00:31:92:1e:
e6:ee:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:07 2025 by rpki-client