Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier: +9VPj3ID8a8jLa0M8rd/D/RLSEQeVPS8+1uqNlCtlwA=
Subject key identifier: F4:E9:7A:EF:4C:1D:63:FE:9A:BB:73:A2:F8:C2:B6:18:B3:3B:9A:37
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial: 019A71B7DE1DDA3A6F19BFE6D2A1FEA00B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number: 0F84
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: Qg43CcP/nWPCt3mcfhKItVDkluvd1st8rj4sAdyEITU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:de:1d:da:3a:6f:19:bf:e6:d2:a1:fe:a0:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=f4e97aef4c1d63fe9abb73a2f8c2b618b33b9a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:5d:da:27:d7:aa:e0:3c:eb:24:d8:2f:3c:
98:c0:58:f3:73:0d:82:e6:62:cc:b5:7f:88:e9:b9:
23:dd:e3:18:fa:10:48:92:8a:10:81:1f:ed:29:12:
18:87:db:a0:b1:f3:31:b2:61:f6:1e:ba:22:37:6a:
0c:d0:48:2b:d1:cc:cf:eb:0d:6f:65:87:5b:e2:3b:
88:58:22:a6:c1:3f:c9:01:00:64:20:80:40:71:ed:
eb:18:de:9e:0a:08:ff:85:cf:32:b8:61:af:ce:b6:
d6:1c:59:26:ef:11:a2:fd:d4:f2:a5:de:b9:d3:ba:
de:8f:b6:68:e9:f6:ec:ea:21:ef:57:b3:da:51:d4:
b2:bd:a4:97:92:aa:25:f8:33:9d:64:41:3b:59:63:
11:16:bc:15:09:d8:94:c3:83:19:84:98:8f:a4:fd:
88:dc:84:b9:7e:e0:3e:eb:dc:21:af:54:04:fb:e1:
59:f6:70:0e:3f:ef:7f:c7:b7:3d:23:6c:4d:2d:0a:
e6:bd:0a:59:87:91:4c:f2:4d:dd:09:a9:f5:f4:21:
ea:a3:e6:8e:4f:8c:19:e8:f4:9f:ea:f4:72:03:86:
5a:7c:37:05:12:b4:c0:5e:9f:cc:08:6d:31:9f:03:
1a:fa:1a:f0:e9:2f:af:dd:24:88:58:91:c7:c9:fb:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:7A:EF:4C:1D:63:FE:9A:BB:73:A2:F8:C2:B6:18:B3:3B:9A:37
X509v3 Authority Key Identifier:
keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:15:ec:3c:6e:92:69:7a:66:67:d0:77:0c:b3:60:51:03:
61:fe:e1:9e:13:e9:33:3a:74:ab:0e:e9:8e:a5:1e:31:18:21:
f1:27:23:97:45:ca:c4:71:99:8c:44:1e:79:dd:77:cf:10:ca:
a7:a3:f5:4b:f5:a5:22:8f:e1:9e:a5:ad:fa:d5:94:66:e0:4a:
68:65:27:88:ac:6d:e0:55:a3:ef:2d:f5:f5:b5:bf:96:43:3c:
07:45:23:02:f2:1c:2d:50:c5:c8:a2:80:f0:cb:9b:a2:2d:cd:
62:de:f8:84:c6:6e:5b:e9:80:d0:04:99:df:3d:fa:d4:52:b9:
f8:55:80:54:a9:50:14:1a:9c:bc:3d:cf:d0:41:59:d1:03:4f:
5d:1a:9a:bf:07:c9:19:c9:c8:a1:e4:38:c5:72:38:62:3a:82:
43:31:98:1f:ce:f9:6a:9f:0a:f9:2f:ba:58:a8:12:0c:a8:d3:
ad:2f:0b:71:a1:c0:9d:81:c8:15:cc:32:1b:b3:d5:d6:58:5f:
ee:b8:7a:2d:15:df:89:2e:f0:2a:53:16:4e:b9:0c:bc:06:28:
02:65:93:1a:9e:1a:5e:14:a8:32:f2:30:b0:da:42:34:9c:e3:
4f:b8:31:20:e1:3b:1d:c2:81:26:1e:fd:60:d5:a3:53:cc:6e:
f3:5b:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client