Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
File: vFxHuPnkKkkot2dDFqcap21AHjw.mft (raw, json)
Hash identifier: z2PZyDzFsozyeELQ3EL4pxQ/6LLa7NdMVkWdZhLBFn4=
Subject key identifier: 38:49:81:88:05:57:FD:82:48:0F:9F:08:72:C8:6C:29:19:4D:1F:E8
Authority key identifier: BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
Certificate issuer: /CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Certificate serial: 019A71B7B332E7E1A314D169EE720ED32BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
Manifest number: 0CB0
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: vFxHuPnkKkkot2dDFqcap21AHjw.crl (hash: snBjC3jYkpt4ICXk5CnQN7FuiNB/r4mhDdsTfJvJiwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b3:32:e7:e1:a3:14:d1:69:ee:72:0e:d3:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=384981880557fd82480f9f0872c86c29194d1fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:07:99:78:ef:a9:d1:e6:f2:2c:dc:1d:e1:
6c:0c:d6:44:ab:2e:76:e5:5f:b3:9c:be:da:ae:10:
48:9d:c5:03:6c:6d:a2:5a:48:91:5b:be:34:8e:04:
1e:ad:72:3b:bf:c1:70:51:9b:c5:e6:64:a9:e4:e7:
a8:9c:a8:75:d7:d3:5d:74:f2:90:3c:9c:2f:17:cf:
95:ff:a1:63:32:9d:8f:91:e4:ea:ff:8b:5a:b9:c4:
7c:89:87:39:b0:1d:f8:3b:aa:99:1b:29:bb:d2:a0:
b9:b9:0c:91:1a:29:be:8b:01:51:25:d0:6d:aa:32:
2f:a8:a2:31:4e:dd:1c:09:97:99:b9:94:67:67:a4:
43:9b:9c:cf:d5:dc:47:79:f0:6a:80:67:84:ae:e1:
24:b6:51:ff:f4:b2:b1:67:7c:51:be:5b:3a:54:f2:
7f:79:96:f9:3c:b0:a2:37:c7:5f:a5:55:39:27:72:
9c:2b:8c:ab:2d:d9:3b:5e:a5:4f:f0:e1:87:1c:ab:
c3:1f:7a:d0:ca:6a:07:0b:bf:75:08:7d:f5:0f:f7:
c6:30:ad:7e:61:a2:c0:a8:65:f3:8c:31:64:50:5c:
03:dc:e4:7a:eb:5a:d4:4e:51:82:0b:fe:dd:13:17:
54:de:c0:ec:53:55:22:ba:4f:80:62:92:eb:fb:c9:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:81:88:05:57:FD:82:48:0F:9F:08:72:C8:6C:29:19:4D:1F:E8
X509v3 Authority Key Identifier:
keyid:BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:65:f9:6e:71:59:24:86:c0:98:3c:15:22:28:15:9e:44:
c7:66:26:06:da:be:b5:32:fc:1d:3a:7d:98:bf:5a:cc:19:b0:
25:a8:50:1a:7e:b2:34:df:3c:e6:fc:08:cf:d4:fe:75:1e:38:
25:52:a8:48:fc:0b:e0:87:3a:ff:a1:11:41:6f:0f:71:35:22:
bc:01:d0:96:06:74:11:88:51:e9:21:36:ca:b1:19:6e:cb:74:
d1:a4:48:b0:ec:a4:9d:2b:2f:d5:d0:a8:0e:1b:45:e6:6e:52:
b1:70:44:52:26:c5:f0:53:f8:c5:7f:b6:ff:01:c0:47:40:ce:
ae:c9:0b:4a:ba:0f:5a:eb:a5:3c:71:ec:b0:46:85:e1:dc:19:
aa:6d:63:97:e2:89:67:4b:ee:11:9c:ed:45:c5:9b:4a:33:be:
da:9c:c8:72:f7:1b:58:34:a5:cc:b4:6a:6f:43:fe:14:1b:15:
12:51:3e:f3:3f:c5:b9:5e:4f:6d:cf:b3:09:bf:d5:52:02:42:
d7:06:13:36:d9:f6:14:1d:80:25:f1:f2:fc:3d:60:17:19:17:
b8:7e:91:b5:3d:e1:94:e1:39:c6:c0:a1:ad:61:a0:77:56:b1:
4b:65:18:8f:7a:23:3a:c9:25:45:00:91:9a:41:9e:f6:52:2e:
38:93:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client