Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier: pP5KlRLqM3WUYbQS19uM4gb1COOWTSvlqOS6WXYyvZ0=
Subject key identifier: D2:7E:32:C8:C5:79:53:1D:14:4F:79:D6:FB:3C:5E:E0:BA:8D:66:99
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial: 019A7293D674D65AAE028F38F9F45BF3091E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: EHYIm629/xDbQMCbDtkX58D8rPTuuN2y9aO3RXRJv7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d6:74:d6:5a:ae:02:8f:38:f9:f4:5b:f3:09:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=d27e32c8c579531d144f79d6fb3c5ee0ba8d6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:24:f6:b7:29:31:55:bb:75:0b:12:1a:09:
9a:1a:47:c4:d6:54:f6:f9:6f:6a:17:88:13:48:e8:
e7:de:4f:8b:82:b6:6d:8f:3b:ab:16:3a:f5:6d:0d:
f5:c3:f0:bc:28:7b:29:54:4d:57:72:bc:3b:fb:da:
23:b0:99:05:78:1a:b0:34:10:9e:21:da:76:a6:fb:
5f:5d:8d:c4:e6:48:c3:44:cb:0f:84:9a:56:09:ff:
af:8d:1f:3b:66:6b:02:03:47:d4:43:05:b4:1e:1c:
4e:41:8e:67:60:b2:a9:e4:12:67:af:15:b2:08:42:
41:cc:17:b1:b4:22:1a:f5:88:d4:ca:80:15:26:32:
96:26:4e:90:8e:aa:ec:67:46:30:57:05:f9:5e:fa:
a0:05:e7:2b:ab:85:19:cf:1f:3d:3b:c0:62:3c:ed:
72:0b:5f:9c:bf:20:09:c7:a1:b7:e6:11:62:63:d2:
a0:6f:0c:b9:f2:d7:89:c6:8d:9e:c6:da:37:c1:41:
a8:70:e2:97:fb:b9:bd:ce:f6:50:3a:14:12:11:7c:
a6:83:10:62:31:e8:2b:d3:af:86:03:22:6c:91:7a:
21:fa:c3:c9:eb:1a:62:f6:2e:8e:cb:ba:75:7b:5d:
79:0f:a7:a9:c9:67:17:50:af:f8:82:29:94:97:a4:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:32:C8:C5:79:53:1D:14:4F:79:D6:FB:3C:5E:E0:BA:8D:66:99
X509v3 Authority Key Identifier:
keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:eb:43:d9:85:6e:f3:01:71:58:c0:83:ba:24:ba:64:71:
eb:16:d6:bb:85:2a:a4:ee:40:58:0f:13:b3:8f:e3:f0:3c:50:
b2:fe:54:f2:6a:9f:66:72:1d:f0:e2:26:2b:55:94:73:fb:de:
53:d3:dc:38:13:9d:d9:60:86:63:8d:d6:f1:69:16:47:15:64:
f2:a1:72:f0:80:14:70:81:5a:19:4a:47:e3:dc:c6:2b:a0:c4:
cc:ff:1c:fc:f3:de:d1:3c:94:9a:1f:53:12:f2:36:24:df:54:
5e:ee:34:e2:0b:2f:87:c4:60:01:77:84:e7:63:4f:eb:81:e4:
2a:ec:0f:b7:36:2f:3f:b2:05:39:57:55:46:61:e5:9e:86:d0:
84:2f:54:4e:ce:36:7c:fa:6d:9c:c9:2c:24:64:f7:fe:14:08:
f9:cc:d7:5c:07:05:6a:81:bd:d0:a0:92:20:e7:b6:84:33:fc:
ea:8b:da:1b:5c:96:1e:dd:20:fe:b0:09:50:83:83:00:74:e7:
c3:17:03:93:b3:46:98:4f:17:f0:ef:89:ee:dd:45:e8:99:15:
42:73:c3:a9:1a:ae:bd:84:00:5d:9e:e1:86:d5:ad:06:53:12:
ee:7c:10:8f:b7:3f:7f:ae:6b:a1:a7:1d:45:5c:5b:da:49:b5:
3c:71:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:28 2025 by rpki-client