Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: hF4Bzh5mv2K33CSNgSBqJBWHCkn7zpYhI+QiNYzAY0w=
Subject key identifier: 16:AD:0F:1B:C2:FD:4C:F6:7C:DC:40:5A:DB:37:E7:79:22:57:7A:93
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0199FC58E8EDC39A750797331E58ECA1D3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 02D3
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: /9VXEM7sfSo09Zd3zKqOlM9MKDD21UhAV9HTqRFgZL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e8:ed:c3:9a:75:07:97:33:1e:58:ec:a1:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=16ad0f1bc2fd4cf67cdc405adb37e77922577a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:0a:01:39:85:a0:ab:ce:17:fb:0c:9d:a2:
7e:90:e9:70:ad:40:07:9b:62:f1:45:0a:8d:0b:a5:
66:55:70:39:6e:d9:57:09:f9:fc:01:9d:c7:81:1e:
ba:a0:3c:06:92:bb:43:55:b8:8e:61:e4:4f:d4:28:
e2:a6:30:2d:c9:2b:a7:fb:bd:83:9c:f7:74:8f:07:
02:c9:90:76:2c:2d:d6:02:67:69:5a:10:ee:93:3a:
38:2f:48:7e:1d:7b:11:20:72:11:2d:7d:94:ab:40:
90:3b:40:2d:26:f4:1c:10:e3:e6:41:cf:04:c0:c6:
73:f5:9b:48:4e:de:6c:f9:f9:37:1e:61:42:2c:55:
2d:d8:fc:df:40:c6:d3:74:1f:8f:da:b6:70:b2:1f:
2c:0a:ec:1a:66:aa:ca:32:1c:13:d4:c3:ea:e2:78:
b7:bc:77:80:70:08:27:1d:07:b8:d7:79:b3:14:45:
10:07:ce:8f:05:b5:22:b6:92:dc:ea:e0:92:33:3a:
ee:eb:92:cc:9d:bc:e4:a4:9c:52:76:18:5f:03:ed:
5e:ea:3d:d5:11:1d:e5:dd:ec:4a:2c:69:8c:ab:41:
8e:2a:f7:32:f2:ad:5c:ee:b6:74:fc:85:8e:01:33:
54:5b:93:94:da:03:1e:1c:da:b3:7e:81:c4:51:08:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:0F:1B:C2:FD:4C:F6:7C:DC:40:5A:DB:37:E7:79:22:57:7A:93
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6a:01:fc:61:4a:3f:17:87:94:9f:d4:03:a0:c0:42:bd:f2:
94:07:89:6f:8b:04:ff:f9:71:d5:8f:90:9e:00:88:5b:00:96:
3a:de:f8:7b:62:69:f4:8e:b2:ae:bb:0e:b3:8a:70:9b:fb:f6:
8f:b3:80:c6:a6:43:f2:79:12:4e:59:c4:31:7e:8a:d2:0f:cf:
0b:1a:7c:a1:a5:c4:00:b4:dd:b3:fe:63:d8:00:ec:61:c7:4c:
d7:6d:ab:ae:e5:fb:96:68:c3:2e:00:54:06:f5:aa:13:c3:45:
42:b2:4f:ba:75:cb:13:9d:12:b9:05:4a:1f:d5:98:48:f7:33:
e5:de:0a:b4:80:d9:c4:57:b4:57:a6:4d:f9:02:10:3a:8b:b8:
c7:2a:83:39:b2:0c:a5:d8:2f:32:c1:35:7c:44:f3:50:b5:ed:
29:56:75:7b:69:13:05:9f:08:e5:54:c1:39:7b:90:8b:2d:de:
1b:3f:8c:a0:9d:2f:5c:7e:1d:23:77:c0:ef:26:e4:17:50:aa:
4c:05:b7:53:85:05:d2:34:c2:c8:c4:44:a9:43:75:df:c7:18:
05:50:ca:2a:d1:83:39:67:e9:45:c3:5c:28:ab:5f:ff:b9:cb:
60:7c:ed:9e:55:f8:c9:22:ed:d2:0f:93:dc:8a:24:50:07:86:
1b:63:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:16 2025 by rpki-client