Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: s0KE8+5FIlZJuJYNiwNMenqzNMNqqLLtMwxqMDwluww=
Subject key identifier: F3:C7:95:1F:94:B4:F6:E7:C4:EF:E4:39:46:5E:D7:0A:99:FF:FB:57
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 0199FD34268B39772C420CE29ACE90498B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 149E
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: ixFsmG01KBB3Q1SuEYcLBL2+D21ByblhtXtt77EC5Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:26:8b:39:77:2c:42:0c:e2:9a:ce:90:49:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=f3c7951f94b4f6e7c4efe439465ed70a99fffb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:a8:59:ea:25:f9:36:7e:27:4a:30:26:1c:
2e:9c:67:57:5b:41:ff:fe:b3:89:be:f7:7b:b4:b9:
62:9b:70:d6:86:e4:78:f0:2b:da:af:60:2b:1c:bb:
14:70:42:25:cb:ba:5b:f1:50:79:47:6f:61:85:d3:
46:47:6d:b7:a7:b6:7a:d5:85:b6:fb:dd:1b:68:3a:
1c:52:39:95:ef:35:b8:ba:6d:d5:1d:c8:39:6e:ca:
9c:5d:3f:4d:a3:e3:30:e1:78:e1:de:50:0f:e6:d6:
87:a7:23:d8:95:d6:43:d7:be:54:ae:10:13:89:69:
71:40:6d:68:ce:fd:a8:ff:e2:14:f2:50:10:24:86:
1a:6c:e1:a7:f8:b1:37:fd:a4:2a:cc:1e:b8:66:e7:
83:9f:e3:7e:a2:46:b1:70:63:47:3a:0e:93:9c:05:
4d:d7:26:54:cd:6d:dc:da:5e:41:40:4f:69:9a:ff:
5b:43:ef:3a:dd:4e:dc:e0:fa:2b:78:50:50:d9:a4:
f8:d3:a0:6e:b0:4b:d3:81:31:c4:bc:ea:15:90:ce:
f9:27:da:46:7b:1d:1b:be:ec:c1:d3:9c:06:99:3f:
df:c2:e7:5f:aa:31:49:17:95:0b:6b:50:38:da:6a:
02:ff:cc:66:32:b6:33:61:43:4b:e3:2d:34:43:27:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:95:1F:94:B4:F6:E7:C4:EF:E4:39:46:5E:D7:0A:99:FF:FB:57
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cc:79:dd:14:58:cf:9c:86:a5:68:53:2a:56:8a:3b:2b:32:
d5:eb:c0:6c:b8:8f:a6:34:70:ab:5b:09:ac:f0:40:da:15:cd:
a7:ae:78:96:b2:75:02:70:9d:6e:ba:d0:e5:4b:96:c0:d2:ca:
45:b4:04:9e:b7:40:30:06:18:bc:15:de:3a:3d:d2:c2:00:a4:
13:d4:e4:f6:d8:8a:84:53:77:86:87:f0:6f:bb:35:e5:b7:f9:
0a:d9:a6:42:ce:b1:31:9d:d6:02:c5:10:c1:4e:39:b3:57:6a:
28:db:08:0a:0b:0a:37:1b:4f:07:0a:16:13:69:10:45:fb:a8:
ec:de:f8:f0:7c:72:eb:66:60:57:91:2a:52:b3:47:ed:04:f6:
af:ea:b7:35:b5:a8:6b:74:da:3f:22:f0:da:55:59:be:fd:76:
5d:22:c2:19:91:27:10:f6:9e:9c:0b:0f:69:b9:6f:af:9e:5d:
55:59:76:f2:f1:0e:2d:43:62:95:73:97:c8:6a:c7:41:59:ae:
fd:64:26:73:4c:00:31:31:1c:0a:32:0f:da:5c:77:a9:c3:80:
43:50:72:7e:9e:29:bc:c8:ef:1e:02:35:8b:ba:eb:d6:0e:b4:
41:ce:cb:c8:19:c6:df:5e:07:36:55:80:9d:dd:29:b0:ca:4a:
08:8e:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:27 2025 by rpki-client