Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: 8A8qSgYxz70FOQ8WOsAAn9Msf25CcnhccZ5C0DGT0r8=
Subject key identifier: CF:98:99:E8:79:26:11:60:3F:AC:1F:6B:A8:9F:1C:3C:DD:FB:B4:7D
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 019A71B914D5EEB30FCCBF796F203FE1F9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: Q2PvB3v51D2wl2GcOtcOF5eKCG3OVC5RGssRlo/ZkK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:d5:ee:b3:0f:cc:bf:79:6f:20:3f:e1:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=cf9899e8792611603fac1f6ba89f1c3cddfbb47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:cc:b3:e0:9f:e5:e8:58:13:7d:c5:e5:92:
dd:cc:e4:b8:65:c8:f3:00:3e:d6:1c:46:8c:63:9c:
6c:3c:8a:8c:32:d9:6a:6d:a9:b6:25:5f:3d:88:f8:
45:21:f4:d5:b1:2e:e8:af:12:ca:4a:92:44:28:0e:
7e:e7:ca:83:87:c9:cd:39:6d:0e:42:45:3c:04:76:
9f:d2:ea:c0:c8:43:f6:b4:8d:32:71:eb:58:2f:36:
6a:d3:b2:4e:90:18:e2:c4:39:43:94:00:48:3d:80:
34:1a:cd:22:0a:2a:bc:e1:e8:8e:68:c9:5a:31:f6:
73:4f:e5:2b:18:df:af:9d:27:15:50:b1:b3:81:44:
d5:b4:e3:8f:c0:5b:9d:64:a7:ac:70:50:c0:dc:d5:
da:38:62:e7:9b:aa:5a:0d:75:8e:50:65:92:db:1e:
bf:41:e4:1a:1a:f1:6e:59:15:46:a7:bf:a6:ce:72:
49:01:55:92:b8:75:9c:2f:30:b8:1b:ed:38:b7:1c:
dc:a8:df:f3:c9:55:e3:16:5a:9e:48:a9:90:fc:fc:
c8:cd:2c:11:01:47:96:31:ab:22:75:3b:b2:e6:55:
13:37:a3:7c:40:88:bf:ce:27:26:7b:ed:73:e2:4d:
00:4a:08:97:a3:21:95:17:f0:54:4f:65:79:7c:7a:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:99:E8:79:26:11:60:3F:AC:1F:6B:A8:9F:1C:3C:DD:FB:B4:7D
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:91:f3:c8:1b:f6:9e:fd:04:b3:3e:d3:6b:dc:e6:6c:6c:
a7:c9:df:ff:88:98:a8:81:1b:17:6e:e4:fe:bc:ad:a0:49:41:
8d:a6:9b:ac:6e:1a:05:c2:9e:91:f9:a4:7d:3a:50:ca:6a:59:
26:a6:98:f9:9b:53:34:00:2b:02:e3:db:be:fe:c6:ac:f5:f0:
7a:00:b6:1d:7c:ba:9f:fe:ec:ed:02:3d:55:42:a8:84:72:a0:
12:17:3c:17:c9:49:9a:3f:6f:84:76:55:e0:3c:d6:8e:e3:e6:
ea:7f:4f:54:f1:f0:53:88:d3:6a:0e:22:8d:c0:20:e3:27:ae:
97:91:9e:4b:9a:df:97:97:cd:1e:f4:76:7f:9a:01:31:e4:8f:
e7:07:87:ac:27:62:f9:86:c4:f6:5d:94:b2:7e:fa:ab:c8:7e:
be:c1:b8:b5:cf:5c:f6:b0:c1:65:b6:f2:2d:87:b5:a2:05:8c:
d4:ad:5a:16:8b:11:20:4c:b6:a9:3e:dd:ed:ae:95:b3:c7:e6:
69:6f:45:6d:98:7e:28:88:ec:91:6f:e6:b6:ca:85:c0:f7:da:
24:c4:21:94:79:0d:c1:34:7e:89:6a:1b:98:81:56:1d:29:26:
2c:52:b3:91:ae:fd:b2:a1:ec:42:c0:8d:a3:40:d8:2b:34:eb:
ac:30:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client