Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: 0T800maOyzjQqPXJuqUZRUb+fYs7ogjeV1/JaKdA1V0=
Subject key identifier: F1:BA:7B:52:99:E4:FC:CC:79:A3:79:83:8B:35:12:96:10:2F:BE:F1
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 019A71B7B4AC4A790A8B8CC378C8F3E7C9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 0254
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: c10noUfSqcBFoG5BBuXZUemvPK/SUWz0LsI2IasGVhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b4:ac:4a:79:0a:8b:8c:c3:78:c8:f3:e7:c9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=f1ba7b5299e4fccc79a379838b351296102fbef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:23:e6:a5:23:74:ae:a3:70:8d:2b:72:d8:
63:dc:73:2e:be:2a:d6:21:b4:f9:20:fe:e6:e0:06:
61:c5:7f:40:d3:d2:a5:5c:d2:f8:46:65:ef:c3:3b:
9d:14:04:43:5b:cf:7a:93:db:cb:b8:c7:22:b4:2a:
8f:c9:54:b4:5d:53:b7:95:14:bb:0e:d5:cf:b5:4b:
ff:e3:f9:53:b4:ff:26:be:32:d2:87:fd:49:b5:6d:
77:60:66:c0:50:8a:e4:d8:0e:15:4d:8e:05:34:46:
2f:70:bf:3f:a6:48:9d:9b:6f:00:0e:3b:af:7b:4c:
07:0a:b1:44:c5:7b:1e:1b:75:7a:0d:95:3f:7c:a1:
24:39:ab:49:12:f6:eb:4b:31:bb:f0:1b:30:5b:0a:
76:09:16:a7:f3:5a:a3:45:4d:3a:30:35:cd:d2:87:
c3:cd:78:8f:4d:c2:d7:49:6d:96:a1:e6:a8:42:e3:
af:43:51:4e:87:d4:cc:9d:03:c8:43:bf:65:a9:98:
41:0f:22:18:cb:79:eb:fa:7c:69:4d:36:79:46:73:
e7:40:83:45:b9:60:6f:d6:03:75:b4:93:d9:8c:81:
3d:f8:4a:cf:26:ce:0b:25:86:b1:2a:c8:65:f4:01:
ad:33:c5:c3:71:15:38:61:e1:6e:a2:60:95:39:cf:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:7B:52:99:E4:FC:CC:79:A3:79:83:8B:35:12:96:10:2F:BE:F1
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:01:d0:21:f1:cd:ff:fa:64:ba:6b:83:18:c0:0c:7b:2e:
43:63:5f:25:ec:e7:45:77:f4:43:60:4a:83:5c:aa:fe:5b:ad:
5a:00:70:1d:b3:07:b2:b7:62:ea:87:7f:ba:47:fa:81:ca:ae:
ed:65:be:53:02:ce:e1:ca:bc:79:40:f4:17:34:c4:3f:d2:77:
34:08:7b:44:59:23:21:76:82:d4:4b:6a:a4:56:09:99:b1:37:
53:de:a0:4a:70:9f:02:1e:8c:51:47:bf:f4:8a:e2:52:5c:80:
7f:5b:d6:ee:10:f4:43:11:00:2c:ce:2c:32:53:5b:45:5f:3c:
2f:b6:8f:27:c8:db:a7:5b:cb:ce:42:66:59:5e:e4:f0:ac:58:
ca:79:af:ce:3a:12:15:84:4a:7e:01:38:34:74:a5:c9:43:f2:
80:a2:0d:9a:5d:f3:ca:14:a7:bc:3d:cc:d4:e9:0e:0f:1f:c0:
e8:84:c0:e2:02:33:63:f7:c3:3f:97:d1:69:1a:46:a3:5b:5f:
bc:59:55:52:b7:95:ee:f3:41:84:f9:86:1d:19:7a:be:e0:86:
d7:74:d7:92:32:3f:eb:f0:b4:7d:6e:e2:9d:91:03:3b:23:4f:
86:fc:07:a2:54:c3:2f:2a:31:d1:6c:69:25:06:a3:bb:a6:c9:
00:28:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:58 2025 by rpki-client