Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: SYXvfi47nPlc7/hI8WwhwWxOu9uthCQ5DFAXSqqOo6w=
Subject key identifier: B4:85:47:93:39:62:32:11:69:EC:DD:86:93:49:FA:58:A7:3D:08:FF
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 019A2A446DBBAAE616E7203A12F18371AB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 075D
Signing time: Tue 28 Oct 2025 10:01:58 +0000
Manifest this update: Tue 28 Oct 2025 10:01:58 +0000
Manifest next update: Wed 29 Oct 2025 10:01:58 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: Bw98yKNzAWsFiFCYYkPgpxLSUsNxUUL8U2yuiMFOsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:6d:bb:aa:e6:16:e7:20:3a:12:f1:83:71:ab:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Oct 28 10:01:58 2025 GMT
Not After : Oct 29 10:01:58 2025 GMT
Subject: CN=b48547933962321169ecdd869349fa58a73d08ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:4f:c1:b3:ea:80:45:72:ba:4f:46:16:63:
a0:ed:51:e9:e5:4d:fb:f9:3c:a2:3b:65:df:10:73:
da:f4:b1:30:21:59:eb:d7:77:55:63:af:ab:38:e7:
ef:9e:a9:38:db:28:24:1a:0c:12:21:a8:9b:8c:33:
c3:8e:e6:f3:8f:06:da:9d:57:f2:59:8e:89:80:49:
fa:7e:bb:3b:3e:ea:f6:d4:ad:6d:bb:cb:7f:f0:f4:
3b:65:72:f4:62:44:b8:a4:af:a8:a4:b6:6a:c0:78:
31:84:70:3a:08:b1:00:51:69:10:38:b7:12:6f:e3:
40:72:b2:44:2a:73:18:72:34:64:a3:f4:a3:95:c7:
46:6b:5b:fe:64:84:7d:0f:0c:50:a6:b9:5f:44:b4:
5b:9f:36:a0:f9:37:cf:18:d8:53:6d:40:13:ac:d7:
14:27:06:47:bc:84:18:64:3a:84:1b:88:e7:f9:1a:
9c:51:97:91:b6:ca:4d:0c:08:44:5c:3e:46:d2:06:
da:75:4e:e1:70:cd:a1:44:6f:25:af:a2:fa:da:42:
5f:34:3c:f3:bb:b3:9e:b9:85:26:3c:dc:c2:3d:30:
18:95:91:fe:1d:7a:44:fd:b7:38:40:19:70:79:ed:
91:72:5a:7f:d0:66:7a:57:51:b2:45:b7:f6:25:48:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:47:93:39:62:32:11:69:EC:DD:86:93:49:FA:58:A7:3D:08:FF
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4e:9c:1c:62:df:e8:ba:6d:56:7b:92:ff:5e:7b:d1:f9:0b:
e6:56:76:7b:36:21:27:d1:e0:28:4f:2b:54:a7:b3:71:1e:45:
e3:8c:fa:5c:a8:b5:94:a2:4c:14:18:84:35:03:96:5f:97:fc:
f0:11:7b:26:e5:f4:8a:f7:27:11:ef:97:9d:a5:68:70:8e:9a:
0e:00:a9:af:b7:91:a9:53:de:a6:dc:29:8b:dd:62:14:e1:60:
7d:27:8f:85:d5:7c:33:33:5e:5c:a0:0f:af:71:bf:cb:64:f3:
b1:30:6f:26:47:27:9d:a0:d1:ef:f0:5b:28:91:85:2c:11:d4:
74:ae:36:c5:ff:ae:0e:97:41:6a:81:c8:fd:e4:16:d7:fc:b0:
e5:92:33:40:d6:bf:90:3f:d8:26:75:95:c0:90:c5:c7:6d:c2:
28:bc:dc:2d:63:54:8d:72:dd:f7:3a:91:f3:2f:27:f8:ed:93:
7f:6d:a1:66:30:fb:eb:0c:1c:09:67:e0:f6:50:a7:8b:38:01:
5f:bd:e5:8d:fb:a5:de:4e:a1:54:ca:23:a7:eb:de:fb:a5:9f:
c2:e9:10:26:16:bc:33:8d:d1:12:31:d1:1b:15:7f:a7:90:d2:
bf:69:dd:55:07:4d:28:d9:8c:c1:c8:ee:07:39:c7:f7:20:81:
31:67:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:21:27 2025 by rpki-client