Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: eLn/idhkq4Y2X9nzYa2ISYJhKXCz/9dlnztOFN8zzmM=
Subject key identifier: 5C:B1:9E:3A:63:95:A5:D6:15:98:31:BC:0D:8C:7E:09:07:2F:E7:4F
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019A72266A061B77CE7BEF92017A323ED180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0C54
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: UftNzsJ71HC6N5maGCl02mnzfheAfTY93519qRNxmmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6a:06:1b:77:ce:7b:ef:92:01:7a:32:3e:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=5cb19e3a6395a5d6159831bc0d8c7e09072fe74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:9e:04:5b:18:a9:83:ae:18:6d:9a:57:28:
e1:aa:03:88:f1:6c:58:ad:99:de:ec:bd:a7:c0:dd:
d3:0f:30:83:ef:f9:2e:1d:b0:0a:91:a1:05:3a:a5:
76:78:62:28:19:b8:cc:41:de:84:9f:30:6b:f8:24:
f1:01:e5:8a:d7:a4:c7:bd:60:32:ba:78:d3:47:fd:
cb:8c:64:f4:35:a0:4f:f5:58:0b:12:35:88:4b:27:
7d:60:f0:c2:43:90:39:c9:64:e7:33:0d:a4:f8:00:
15:1f:57:68:4f:09:e5:00:30:98:a1:5a:5c:77:83:
f3:9d:65:c5:d4:13:c3:7b:13:d3:60:1f:9f:63:f8:
24:e4:72:03:40:f2:a3:48:41:c0:6e:e7:0b:ed:2d:
93:82:54:c0:1c:6f:bc:5e:71:09:71:4a:45:ca:14:
00:3f:23:93:59:80:82:70:bc:66:4c:2e:64:00:9d:
fa:ef:de:16:c8:a5:a9:59:9d:b7:35:2d:ec:9a:35:
5c:1f:32:de:31:2e:b2:6c:ad:1b:dd:cb:22:6d:74:
a0:4d:32:42:8f:ec:0a:d4:e0:49:d1:20:9a:bb:71:
ae:a5:7f:b2:ee:73:2b:ce:56:7c:a1:46:7e:65:f0:
93:e4:2a:67:f6:7e:37:b6:b6:05:52:fa:4b:68:0f:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:9E:3A:63:95:A5:D6:15:98:31:BC:0D:8C:7E:09:07:2F:E7:4F
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:63:fc:8a:83:27:f9:5f:6b:c4:f5:92:1d:8c:a9:b1:16:
32:37:03:c8:c2:d8:da:b1:e4:cb:e5:25:d9:5c:49:7f:b5:51:
6b:e0:1c:46:38:97:fd:fd:39:8c:83:d5:7b:a6:54:3a:68:19:
e2:41:b2:98:54:d8:84:45:ed:b8:91:c9:d9:22:b2:da:53:88:
26:1f:e6:fa:8e:e2:1d:b3:81:52:e6:97:dd:58:c3:cc:cf:55:
e2:ba:28:f1:56:ed:72:e2:e4:43:61:9b:aa:10:67:93:65:95:
51:31:54:e8:b2:45:27:06:72:8c:f7:dd:89:ab:7a:de:d8:8a:
61:6f:62:83:98:43:6b:77:bc:9a:9b:c7:2c:db:ac:8f:f9:85:
a6:a7:54:32:95:6a:6a:05:f0:e5:f9:46:a2:42:1b:3d:53:5f:
7c:2e:e2:19:b1:64:5b:81:04:b9:0f:2a:3f:34:9f:f1:f0:2d:
e2:5c:e7:f6:81:e5:4b:f8:d2:f7:44:4d:5a:fb:31:8b:bf:ca:
7f:74:31:68:57:a2:fe:9f:99:44:21:21:0b:65:cd:b6:b8:52:
61:ab:a7:dc:16:1c:bf:aa:ec:5e:2e:9b:58:a8:d8:c5:f3:78:
e9:37:83:86:fd:c2:82:a8:71:a1:82:fd:6c:35:e2:5e:08:7d:
75:bd:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client