Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: VCeyLQd8VNtdF5AKq08q3vmArYFs07+sk3zt8jRxcCw=
Subject key identifier: 14:BA:0C:2B:2B:4A:90:BF:65:59:4B:96:9F:B5:E4:A5:B9:0F:4D:68
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0199239FE674803A0972D3D7FBAD31130F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 10:01:45 +0000
Manifest this update: Sun 07 Sep 2025 10:01:45 +0000
Manifest next update: Mon 08 Sep 2025 10:01:45 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: WM+z8VJJRa83Wf34UxglFMaLBtatdMFx/nuJ2WJ+OsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e6:74:80:3a:09:72:d3:d7:fb:ad:31:13:0f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Sep 7 10:01:45 2025 GMT
Not After : Sep 8 10:01:45 2025 GMT
Subject: CN=14ba0c2b2b4a90bf65594b969fb5e4a5b90f4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:ef:99:4c:f4:0f:1a:30:df:ea:40:83:2a:
f7:1f:3d:96:0a:f1:40:b8:d6:ce:fc:f1:1c:2e:9a:
62:03:9e:23:a5:50:d5:0b:21:80:96:2a:33:bc:15:
e6:c6:62:ab:8d:05:51:ca:54:fd:79:b3:fd:3e:45:
a1:3d:fe:a0:60:3a:e1:0c:9f:63:84:70:9e:5e:ed:
fd:e3:2e:30:6f:64:df:84:65:9e:87:e7:c0:26:c1:
41:d5:22:6f:3e:f1:2e:7a:e5:be:07:1e:42:ee:56:
3f:6c:3b:66:6a:86:9b:e0:c7:38:b7:5d:9b:99:97:
e6:5a:0b:e8:97:4a:91:aa:f8:83:78:94:d0:0e:5c:
00:d3:17:15:27:60:9e:85:c4:e9:c3:b1:d7:ab:be:
07:fd:ae:a0:08:13:74:a0:54:06:42:a6:6a:a1:a8:
39:c8:e3:44:53:5b:8e:1c:2c:0e:6f:dc:1e:2c:13:
b8:0e:8c:ac:47:9b:6f:1c:df:6f:f9:8c:28:df:06:
aa:a0:c8:39:84:f9:41:74:b8:96:22:76:d3:02:2d:
fb:8b:fa:36:15:5c:56:d0:8e:b3:4b:f6:18:88:35:
4c:8c:9f:e1:df:59:2c:1f:f7:42:22:70:9d:09:9f:
22:64:2f:37:9b:62:51:2b:a5:28:fa:47:e5:25:e2:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:0C:2B:2B:4A:90:BF:65:59:4B:96:9F:B5:E4:A5:B9:0F:4D:68
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5e:43:13:b3:b7:be:72:74:ce:32:be:cb:9a:8f:98:38:25:
a1:36:a0:4d:f4:ca:1b:83:67:86:59:b8:62:31:83:04:a8:38:
50:fb:57:bf:88:f2:ed:24:a8:10:71:b4:a4:9d:82:4b:0d:6f:
09:c7:8c:cf:fb:86:bf:7d:c6:62:f7:70:59:ee:4e:2a:81:36:
73:73:39:36:af:df:36:61:5a:60:d3:76:20:3d:dc:56:c1:e2:
77:be:6c:ae:25:3e:4f:28:2a:30:bf:50:4e:8a:f1:ed:9a:be:
55:bc:85:26:62:d9:19:75:75:e7:cf:16:be:f2:f1:c1:0d:77:
a2:b9:01:83:e3:fe:53:cb:fc:12:da:db:b0:22:09:a4:4f:45:
90:de:3d:50:4e:45:37:07:7c:a3:a7:c4:19:2b:5c:41:4d:fe:
c9:d5:5d:0c:1c:e6:17:78:04:90:77:66:04:53:0c:6d:fc:86:
8b:0e:54:ec:23:b0:f2:0e:bd:17:de:14:db:68:65:e5:59:97:
f2:9b:b6:1c:df:75:4e:44:ee:e3:98:26:1f:b8:69:b2:5c:33:
58:df:5f:63:9f:67:36:37:46:de:8e:88:25:06:a7:10:94:af:
90:6f:43:90:41:16:b7:56:a4:ee:e6:f7:5a:09:fd:d1:5f:d9:
08:de:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:22 2025 by rpki-client