
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: Nbpb+Kqr2NEWsbm2xLy0B6pGJzvoK/SWnunHm29v9So=
Subject key identifier: 99:49:7B:C4:90:8F:62:1A:15:BD:D9:94:9C:56:42:27:0F:5B:4A:83
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 019923A0E4BAE9BB05B67A210C702E3DAB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 05F1
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: BBPdfCaNwFQ/0QH9cLG4HKdXqW4KIojnAqG33fO8Shw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e4:ba:e9:bb:05:b6:7a:21:0c:70:2e:3d:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=99497bc4908f621a15bdd9949c5642270f5b4a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:58:39:9e:87:a4:e5:9f:9d:0c:20:c8:61:
84:b1:d8:77:37:d1:5f:3b:92:52:d7:12:cf:82:61:
66:10:e4:62:a0:b3:5f:83:ab:8a:e0:97:64:81:cd:
6b:ec:d3:e3:89:68:81:a8:d6:b0:59:24:a8:0f:12:
7d:e7:51:29:21:47:01:fc:ad:bb:de:a6:36:f8:f0:
0a:c4:2b:7a:89:45:84:6d:38:db:52:dd:90:b1:5f:
e2:18:a9:10:61:f5:62:58:11:1c:9f:56:3c:57:66:
b3:1f:74:c2:c1:84:60:15:cb:9f:15:f6:de:06:f5:
17:eb:dc:72:ec:b9:29:c2:4a:3a:22:06:29:10:e9:
be:c0:c8:cc:59:44:e9:bc:21:c1:a2:b8:90:70:4a:
78:13:94:09:a5:dc:bb:1a:d5:b1:d2:ef:8b:38:81:
57:dc:c3:b1:e6:5b:b1:1c:1a:33:b5:94:a8:bf:9e:
05:28:f2:1d:f4:40:f5:42:41:55:4a:6d:d4:bc:90:
85:92:94:80:ff:a5:0b:9f:61:8e:10:b9:86:d8:f4:
af:47:8c:e8:97:52:0e:4c:70:f3:2b:1c:09:e1:49:
6c:6a:6a:58:f0:69:eb:fc:c9:8f:c6:81:ed:32:47:
f7:c4:6e:0c:86:06:e4:9c:4e:92:7a:50:8c:2b:a0:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:7B:C4:90:8F:62:1A:15:BD:D9:94:9C:56:42:27:0F:5B:4A:83
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d4:ab:3b:e2:e1:3b:3a:18:27:3a:a2:50:7e:c8:5f:49:f7:
51:c4:56:0f:92:32:25:6c:b3:80:5e:83:f5:77:1d:9e:53:ec:
81:80:98:77:ad:ca:cf:2b:e4:56:c8:4c:77:cc:49:47:9c:a6:
97:51:29:4f:8d:02:d6:60:49:98:e2:41:a1:17:ce:cf:d5:57:
3c:2b:a9:a5:64:3a:f3:79:0f:24:2b:f6:31:70:4b:b9:5a:76:
96:79:67:37:eb:9c:3f:26:ad:ae:98:fd:59:63:b3:8f:02:a9:
b2:81:d0:b0:9b:c1:74:44:71:b0:e1:7d:66:5f:2c:59:2a:e5:
ec:a2:e2:02:41:7b:20:34:91:22:6d:0a:a8:3b:5b:21:cf:62:
5e:9a:40:2b:2f:ce:14:a3:df:b1:83:0b:b8:1b:45:07:b4:a3:
93:d0:68:60:61:4d:09:01:bc:d1:0b:56:ca:d2:3a:c8:65:25:
dd:80:99:b0:8e:04:97:f1:cf:58:2b:e1:b8:7f:30:d2:44:a0:
64:85:df:6b:95:cc:77:39:6d:5d:1d:66:ba:21:0d:b3:5d:b9:
82:24:e0:0e:73:6d:02:c2:e6:06:bb:0e:3e:ab:7d:ae:6f:37:
01:b3:f0:ce:0b:cb:81:72:a3:96:73:a7:b2:2e:69:5d:0d:f5:
5a:0c:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client