Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json)
Hash identifier: FZUytkG9Erlkvk6AtdAWUQrm0V/UAn4TOZok3p0I9aE=
Subject key identifier: 9A:FA:5B:2D:D7:B9:02:63:86:04:E6:E8:FB:AC:73:44:F9:36:12:C4
Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Certificate serial: 0199FC8FB4368CFA2F336D11F9EEC3DC7FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
Manifest number: 0844
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: rpnkSdoupREtZdE+xKPSXAP4rZ4xUrPcELct5FFZhQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b4:36:8c:fa:2f:33:6d:11:f9:ee:c3:dc:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=9afa5b2dd7b902638604e6e8fbac7344f93612c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:6d:70:24:ac:a6:77:8d:e5:37:ed:73:f3:
f7:fd:43:15:2f:4a:82:1b:d5:17:5f:16:3a:42:ec:
e2:10:fe:2a:38:ee:a9:1d:01:e9:58:21:a0:4c:bf:
0f:9c:3d:02:58:9a:58:2b:58:2d:23:77:d3:d0:47:
c3:8d:1b:34:15:f6:7b:8e:3a:ac:6e:7f:f2:cf:cb:
63:17:8c:07:5d:5c:bd:b7:84:85:49:28:6a:ea:20:
f9:fd:cc:84:52:61:28:84:90:3d:1a:c3:ce:5e:0c:
db:58:14:87:2d:92:00:1c:3c:7c:19:40:c8:7e:80:
4f:46:d7:7f:fc:fd:93:91:1a:29:f7:a5:79:20:1d:
bb:ab:cf:86:f3:6b:09:b3:9c:2c:c8:31:6a:1f:55:
d6:29:4d:8f:7a:f1:26:73:74:fd:22:13:46:e7:a2:
7f:f3:c3:95:00:f4:7e:c5:0d:13:2d:d9:fc:61:ea:
3c:22:52:6c:9b:b0:4f:d4:73:bb:e7:6d:a8:f6:b2:
e0:e8:ee:ff:af:3a:c2:cd:46:80:22:b9:23:d2:53:
c2:30:2b:6c:5d:23:9a:27:31:4a:db:8b:56:a3:a0:
66:cd:98:ad:82:a2:83:cc:e7:98:56:92:53:1b:84:
6f:80:00:be:e2:21:1d:2c:1f:17:2e:2c:e7:a0:4e:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:5B:2D:D7:B9:02:63:86:04:E6:E8:FB:AC:73:44:F9:36:12:C4
X509v3 Authority Key Identifier:
keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:2b:36:0b:1c:ec:98:63:6b:6a:99:71:fd:a4:a6:a2:f8:
f8:47:c2:d7:40:0f:17:d7:d6:58:31:d2:2f:cc:1a:26:3e:ad:
3d:19:44:c1:f5:36:fb:1c:99:90:a6:38:8e:d6:0d:95:47:70:
82:42:01:be:4f:9e:3c:50:db:0c:c2:95:35:af:e1:07:92:0d:
ea:76:43:32:61:1b:39:97:8f:69:3f:d9:a6:55:4e:50:e4:31:
82:43:24:1d:30:52:80:d2:ad:3a:47:5d:a4:85:45:85:84:e4:
08:ef:61:3c:c4:61:f2:39:97:30:a1:1e:ea:7a:ee:bd:54:d7:
b2:cb:16:22:0b:46:c3:f8:b5:0a:af:31:10:2b:02:e7:86:22:
a3:8a:3f:d3:fd:f4:14:45:15:32:4d:6c:bf:25:76:7c:57:fd:
82:b0:04:44:3f:04:42:d1:1e:32:1d:df:c3:74:a1:ec:f7:a9:
ce:f8:a0:1d:e3:4f:73:92:53:2b:bc:1f:c4:6a:ca:93:46:05:
9a:bb:88:ff:f1:72:d7:11:21:63:aa:71:73:28:09:d4:28:b9:
0b:7e:f9:da:da:1e:d7:70:43:94:19:9c:16:27:d3:88:e7:34:
e9:d1:b0:47:a0:b2:b1:53:d9:b2:23:ac:e2:f1:a4:c1:02:1f:
ac:9a:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:34 2025 by rpki-client