Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: MS1QQl6JxHZm8SzbnGNQ41wbDDGOj6olYE6uFPkaMgA=
Subject key identifier: EE:F9:33:98:DA:91:E4:25:DE:C9:F9:CC:12:27:60:F6:81:F8:A2:23
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 019A7293D2AE6567DB9EF770049B73879096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 152A
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: xS8BmmbhD2RPKBDuxc09TNnXaRhUb2SnBRVsvztEl0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d2:ae:65:67:db:9e:f7:70:04:9b:73:87:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=eef93398da91e425dec9f9cc122760f681f8a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:ca:7a:75:81:0d:64:86:2e:4e:71:8f:99:
70:b7:32:18:0d:29:45:b3:6f:dc:ac:89:0b:b1:7e:
7e:42:8f:07:60:a6:fa:54:a3:2a:f9:13:54:c9:a6:
6a:0c:56:e7:c4:18:23:cf:cf:0c:fa:13:4f:a4:60:
88:f3:ed:5b:ad:53:6e:96:70:a3:d3:e5:71:ea:db:
40:05:91:c3:55:33:59:d5:c4:d1:9d:f5:49:d4:d6:
87:96:da:d9:af:c5:69:a8:1e:3a:e4:76:f3:95:e8:
cc:f7:3b:5b:84:db:30:88:fd:dc:aa:ac:5b:9b:b5:
7a:df:8e:c3:fd:10:cc:b8:26:1a:ab:de:a7:aa:8b:
e1:e7:32:06:4f:5d:61:93:38:b1:8a:aa:4d:e1:b4:
5f:af:61:0d:94:03:b2:0f:65:14:c1:88:5a:5e:69:
35:93:1d:69:cb:c7:e5:34:1c:7f:92:c9:56:79:33:
a1:bb:e9:33:19:c5:aa:8f:8f:d0:df:16:30:f0:b5:
6d:36:ea:a1:6b:8b:c7:b1:d2:17:4e:26:92:f3:20:
aa:3f:1b:42:f7:06:b3:24:73:20:8e:6c:8c:13:b7:
e1:c3:f0:85:f5:f0:1f:be:21:32:05:15:5b:92:4f:
d9:4a:ae:2d:58:0b:43:8f:0a:86:78:7b:12:91:1f:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:33:98:DA:91:E4:25:DE:C9:F9:CC:12:27:60:F6:81:F8:A2:23
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:61:af:5b:6d:2b:fd:6d:e9:5a:50:d8:96:55:2b:9a:36:
78:b8:7b:6a:98:8a:34:da:6a:6a:d7:fc:a6:ab:16:8d:70:b3:
e9:37:21:c7:4f:e9:43:3e:af:25:ba:7b:a4:98:63:89:56:85:
24:d2:7d:01:a9:af:c9:93:81:9b:83:a2:a7:d4:7b:07:12:a0:
78:45:fa:33:d1:02:0a:bc:d2:54:a9:a3:61:ce:15:94:b0:a6:
21:c8:37:f5:b1:f6:c9:77:1b:f8:03:b7:49:a6:b9:8d:1c:b9:
99:36:46:5f:29:df:b6:d3:34:68:6e:00:a6:7e:ba:60:70:c9:
1e:aa:8a:7d:70:5d:17:16:c1:b2:e1:90:96:75:ee:06:a2:fe:
bb:ab:f4:1c:3f:13:9e:63:59:d3:fc:e0:90:ce:76:0c:ce:20:
c0:14:c7:df:71:e0:ea:e6:85:15:e7:db:ae:0e:b7:18:34:ab:
28:7b:1e:eb:8c:b4:39:d4:0b:30:5e:43:95:42:2d:b6:b0:52:
72:a0:57:2f:c1:cc:3c:5c:1d:a3:dc:5c:b3:16:98:f9:ce:fd:
3b:5a:a7:f1:5a:47:c7:b0:82:c9:02:59:10:0a:50:7b:37:5d:
04:a4:45:b7:0b:12:d9:64:02:12:68:86:6e:96:8e:cf:ee:7f:
32:f2:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:47 2025 by rpki-client