Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: hvjlRlif2FIzl/DxhXDzgMBpbFYKSAziBUrj/4JQjAI=
Subject key identifier: BD:A7:F4:6A:4E:21:9A:EB:AD:4B:1D:8E:C6:2C:AD:D9:5E:2E:B1:24
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019A71B8B47B6824D69AE341C274D267E11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 031A
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: XcC1scz6Gn2XSnD9IoGRI55gEhMYlhudaMVN2YBm2zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:7b:68:24:d6:9a:e3:41:c2:74:d2:67:e1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=bda7f46a4e219aebad4b1d8ec62cadd95e2eb124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:77:dd:b5:cc:c7:ad:ac:e0:65:f1:d0:94:
dd:b4:f0:ae:25:f0:a7:57:65:cb:b6:c5:ea:c1:2a:
95:6e:9a:da:d4:7b:b2:d9:15:eb:84:fd:37:62:88:
31:68:d8:ee:3b:87:ff:8a:4a:b3:0c:e6:49:8f:90:
08:b0:b6:3f:6b:a3:92:4a:68:95:a5:52:89:8c:b4:
f7:97:bb:ca:f3:bd:fb:de:f9:a3:c5:f0:38:11:63:
ad:fc:d0:53:74:41:55:ce:bd:3e:4b:e8:9b:82:39:
c5:bd:02:dd:9f:77:b3:a2:e6:4a:6a:59:9b:17:da:
21:65:61:a3:f5:d7:d4:4b:d4:ce:b8:b6:02:79:3a:
85:ab:c6:e5:39:6a:de:47:d2:5b:3d:89:6c:a9:59:
0c:e9:da:71:f1:1f:ab:ca:76:ca:15:c8:9e:b6:cf:
33:16:f1:01:20:94:46:ab:20:d3:dc:a3:f5:ca:6f:
fb:fb:24:0a:be:3a:0b:13:7b:68:fb:5c:88:71:13:
96:fb:ed:3a:b7:89:ce:eb:0c:59:dd:55:73:19:3c:
29:27:3a:d7:ff:03:81:b3:5e:94:2e:b3:f3:67:8b:
cd:40:4e:8a:a9:59:15:71:a3:a6:42:eb:a8:cf:66:
c9:c9:5e:f7:67:17:fb:af:93:f4:06:20:e5:55:69:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:F4:6A:4E:21:9A:EB:AD:4B:1D:8E:C6:2C:AD:D9:5E:2E:B1:24
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:89:2e:a7:63:80:6e:de:cb:eb:52:d0:b5:85:f9:f5:12:ee:
94:a6:70:63:e6:58:cd:92:76:45:3c:21:2f:93:b9:0d:91:4d:
38:d6:64:0a:83:98:0f:58:ce:7a:89:3e:1d:cd:bb:9b:34:36:
d3:f6:9d:e7:be:32:80:9c:b7:d9:f8:de:7d:cf:03:d9:12:c4:
c9:0b:ad:c8:f7:1d:fa:8e:44:00:6f:b3:70:da:da:14:ed:f3:
13:7a:32:07:a2:49:31:28:98:39:6c:45:1b:78:ad:48:04:aa:
6b:21:b5:6c:4c:a5:48:b1:c3:f7:e8:bc:e5:d5:ed:f4:f0:53:
2d:a4:7b:dc:fe:d1:7a:ba:c3:dd:ea:c0:11:31:e7:29:a5:1b:
5d:49:7c:b2:3d:7c:7f:58:95:e6:fc:ff:66:39:53:7d:78:73:
18:4a:8a:9b:a2:08:23:aa:24:98:2a:fa:5d:d6:65:fb:05:bd:
3e:ee:c2:5d:c7:ee:99:54:66:98:90:e3:a7:cf:7d:9a:0c:ae:
95:f7:04:a2:81:0b:42:55:ba:0b:c8:6a:9c:44:47:13:46:2f:
cb:74:c2:1d:75:c7:1e:15:e6:00:16:2a:8f:1a:f7:82:7c:05:
47:6a:3d:33:0d:6c:1f:94:da:72:9f:84:7b:e6:71:9c:48:6d:
74:15:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:42 2025 by rpki-client