Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: 6ULh+vOX1Lfp76XA3LnFOOQ/CjV9ffQ7omwlqHd/mKc=
Subject key identifier: B1:4E:F1:F2:E2:A0:2D:66:E5:49:E6:AA:57:2E:7C:C9:70:C2:3B:2B
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019A72CA3FE7A5350414264D7B426C69D762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0B34
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: z1dZaWXKpMa7SIPbvvHnJFX26SuXEOrm/HAih5SvvKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3f:e7:a5:35:04:14:26:4d:7b:42:6c:69:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=b14ef1f2e2a02d66e549e6aa572e7cc970c23b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:7b:07:c8:8a:17:99:14:3d:e5:78:a0:e9:
1f:fe:7c:2b:86:70:e5:9c:a1:56:ce:b6:1a:b4:72:
1f:84:f8:d2:8e:a0:9f:7d:3a:3a:2c:5b:6f:89:c0:
d8:f2:08:ee:bc:83:ae:31:c2:fd:3a:d2:e2:56:1d:
98:0b:c3:1e:7e:be:53:ad:5b:9b:58:67:6d:40:ff:
80:3a:de:6e:c9:0b:20:3a:74:17:7d:21:cb:98:7e:
d0:94:96:34:33:f9:13:df:49:a3:4d:15:24:e5:84:
8e:e8:61:7d:bb:59:eb:c1:6e:27:33:d6:dd:d7:06:
23:84:10:58:b9:d7:b4:de:07:79:13:51:03:52:f8:
9f:d0:e9:61:f5:3d:a4:22:64:df:70:58:43:ac:27:
f4:95:65:a0:4d:73:eb:d3:e4:bb:6a:22:08:7b:20:
25:08:15:f1:91:35:84:6c:20:66:e9:be:21:00:06:
00:ad:a7:46:3d:83:0c:e7:54:77:d0:53:b1:13:ad:
61:3c:4f:ca:81:0b:19:24:c0:b8:a5:ef:38:df:a6:
94:0a:35:41:78:71:72:98:ab:ec:77:73:79:e7:c9:
cf:a8:d2:26:c0:3a:65:b1:a3:84:65:59:0a:07:80:
7b:b4:1d:82:fa:d1:25:a7:40:21:94:9d:d3:ff:3d:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:F1:F2:E2:A0:2D:66:E5:49:E6:AA:57:2E:7C:C9:70:C2:3B:2B
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b6:ef:9f:9b:ac:cc:cc:ff:54:aa:eb:d9:07:d3:1d:d0:b9:
8d:11:bd:83:bb:eb:fa:83:a4:55:3e:eb:8b:10:4d:34:14:70:
72:e8:0d:84:16:6a:2e:3c:40:9b:59:a0:b0:ba:a0:2b:c3:20:
26:e8:7c:c7:ff:f0:99:bb:3a:76:ca:68:8b:3b:58:6e:7d:07:
e1:ed:56:05:3e:4c:5d:74:e2:c5:99:dc:f5:75:bb:dd:08:f5:
b9:2c:cb:43:39:b8:09:d6:3c:d9:66:10:67:32:78:dc:e2:4d:
5c:03:c5:89:c3:f8:4d:d7:72:7f:72:dd:73:61:0d:d0:4d:66:
9c:f8:01:8b:f7:0f:fb:55:9d:6e:84:32:63:a1:4a:70:dc:38:
19:58:dc:bf:02:7c:f8:53:a3:f3:ad:5d:d7:26:0b:54:67:67:
1a:88:45:e3:f8:0d:f9:4a:02:99:98:c6:7a:d0:49:3f:0d:7f:
ed:5d:c5:05:6a:1c:39:9c:64:82:5c:17:25:e8:a1:a6:f2:b5:
fb:67:34:4f:5e:bc:07:8c:d9:a8:a4:75:30:94:d3:f4:0b:e7:
81:f5:23:fc:6d:ef:ef:85:5e:e2:71:c1:09:5f:29:27:b9:26:
b2:52:26:ba:81:51:a1:07:74:7b:d2:db:ec:a3:0c:66:eb:56:
a6:68:90:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:19 2025 by rpki-client