
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: oFCB0juyBIgHOpoHLAjNlQiC7gSX4PpHMq+/ypA7jNI=
Subject key identifier: 8E:72:11:A8:9E:6D:33:67:05:B5:8E:26:43:EF:F5:DB:92:82:28:55
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 0199FC588E2B6953266551AA48BEDB254355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1401
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: dg3ne1Ws5KnIdEPFmMZWnoA6xGRSOY8Z/LMS49Zxw1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8e:2b:69:53:26:65:51:aa:48:be:db:25:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=8e7211a89e6d336705b58e2643eff5db92822855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:19:74:b0:ed:bd:f6:9e:a6:ad:9a:b8:59:
98:ef:d7:9d:af:a3:ea:7e:8a:41:02:b4:57:72:26:
7d:4d:80:53:c5:1f:88:24:f6:a8:15:5b:93:67:9a:
26:54:6b:48:3c:5b:d0:ec:4a:c9:67:29:dd:20:99:
7a:25:5e:3e:49:4f:c2:c6:75:ec:44:3b:a3:b0:c5:
86:f9:b1:dd:52:12:f7:cd:d1:0a:ee:89:d3:b6:75:
c2:1b:bb:e9:72:ab:1d:ba:aa:79:a4:bf:23:22:7b:
8c:2b:a5:88:bd:dc:a5:09:3d:ee:06:8e:57:3c:b2:
56:68:03:d5:91:f6:fe:77:c6:3f:f2:48:b6:8f:be:
a0:59:e5:29:6c:3b:ba:38:12:09:0c:25:a1:3a:f5:
8b:07:97:f3:36:3b:01:4f:fe:23:24:e6:66:b6:5b:
18:1c:eb:3c:59:34:d9:ad:08:0c:be:39:37:00:b8:
61:05:2f:02:54:a3:73:86:df:57:a0:ac:b8:08:15:
51:3f:2e:23:51:de:7f:83:60:93:fe:c8:92:48:30:
c9:31:1b:1a:02:6c:f6:82:c9:bd:79:38:52:b9:d5:
bf:13:84:24:bf:b8:e5:50:1d:0c:55:14:17:2d:b1:
ce:7c:4d:01:31:63:a2:26:1c:e2:c8:0a:32:82:db:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:11:A8:9E:6D:33:67:05:B5:8E:26:43:EF:F5:DB:92:82:28:55
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:bb:dd:85:44:d9:d1:a5:10:db:a3:47:be:82:6e:5c:d5:
c7:5c:96:5e:ff:90:76:a7:c1:31:ff:bb:aa:8d:00:eb:08:9c:
85:4a:f6:1e:06:5b:31:0c:6b:bb:60:b7:ce:a7:50:9f:11:5c:
9f:2b:07:6e:4a:aa:f8:6f:bd:79:27:b8:80:0d:a9:fb:6c:40:
cd:91:fe:61:3b:a2:80:27:b2:3c:69:80:ee:e2:3e:28:49:09:
7d:c0:f5:b1:f5:f0:d8:8b:bc:f0:17:d0:ba:53:a0:79:f1:b7:
e5:39:01:fd:fd:29:89:04:76:f7:b2:3b:e6:ad:62:82:59:5e:
ff:f5:c8:19:6d:70:4b:2a:17:37:60:b5:42:63:db:2a:8d:75:
26:42:21:5d:2f:b8:64:ef:f3:3e:70:e7:60:34:e1:45:ea:97:
33:5a:6d:30:d6:33:4a:1e:ae:87:74:db:9d:20:77:c8:a0:d2:
cd:94:9e:21:16:95:c8:a8:24:09:1a:85:7c:38:25:7b:22:c2:
79:28:7b:ef:3e:57:a8:c4:6b:d1:49:e9:2d:08:3d:f5:51:ab:
61:de:05:36:b4:89:a6:09:45:cd:7c:0e:62:86:a8:d3:3b:82:
06:75:44:b8:f1:9a:50:7c:7f:9b:00:5a:36:cd:f0:7c:df:b4:
42:14:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client