Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier: a618Ogy/83oOc01KaKnURF3TUqvonP33jxuP+sP1MbM=
Subject key identifier: BD:8F:63:9C:0B:E6:B5:7F:0B:DA:12:F1:A2:35:47:D7:4F:58:9A:F9
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer: /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial: 019A71B873B2D6B125B5666754329AD86793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: 9HE3VVbu8M1YqNrlQ23GjudYZDAv97E8V1ltegHMERI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:73:b2:d6:b1:25:b5:66:67:54:32:9a:d8:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=bd8f639c0be6b57f0bda12f1a23547d74f589af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:ad:1e:cc:a0:38:6c:31:c6:0a:e9:19:c6:
03:4b:b3:51:2f:67:f5:41:0c:36:a4:64:2e:83:f5:
a9:98:b6:e0:a2:e2:57:a4:d8:29:1f:b1:3c:73:9e:
7c:ac:12:1d:48:1a:12:91:21:d2:4b:ea:28:10:a0:
fa:25:41:50:4b:5f:6d:20:b5:4b:10:20:4f:e7:70:
01:56:cf:6e:2e:8a:ee:db:26:b9:30:1c:1a:24:58:
7a:da:26:06:cb:1d:5b:8a:5f:8a:53:b0:c1:52:5b:
2f:73:d9:e8:01:6d:48:57:12:a4:10:45:b8:60:4e:
0e:d6:1d:cc:71:ef:52:83:b1:b5:2d:94:86:7a:61:
e4:20:d7:d3:dc:a6:ea:e5:40:05:26:49:91:b2:d2:
74:02:67:86:6a:79:71:ca:ce:17:18:38:9c:10:58:
14:cb:2b:34:59:4e:71:2c:75:18:0f:6f:32:d9:e0:
e8:1e:2d:f1:a2:53:15:e0:f1:cf:14:ef:da:09:fe:
f1:64:a9:51:06:f0:d3:b0:10:a0:c9:a2:1b:5d:c6:
fd:a2:d8:e5:e8:8a:db:c8:5d:b8:54:2a:8e:87:f5:
45:3e:3a:d9:25:7c:0b:5d:b7:05:9c:97:70:c0:20:
04:08:da:f3:ff:1b:89:84:35:26:25:a3:be:df:be:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:63:9C:0B:E6:B5:7F:0B:DA:12:F1:A2:35:47:D7:4F:58:9A:F9
X509v3 Authority Key Identifier:
keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bd:3a:52:f4:f8:29:98:39:8d:fe:24:8f:f2:ad:a9:eb:a5:
dd:d8:ee:6c:dc:1e:f8:a1:df:75:52:20:63:0d:69:82:21:57:
b8:c3:ee:83:28:04:76:56:ce:eb:44:92:09:12:82:b4:e0:7f:
0e:b9:69:b7:9a:ac:66:db:53:3b:72:c7:df:1a:cb:16:05:ef:
28:f9:8b:77:c8:c3:f6:ad:0d:fa:18:dc:13:f8:02:74:ac:9e:
7d:68:c4:12:0f:f3:e1:26:37:5f:1a:e8:de:c7:78:dd:be:4a:
29:2a:78:f4:dd:e5:58:a7:9f:6f:42:be:d1:3c:29:ac:8a:46:
91:6d:8e:99:0a:e2:7e:18:82:fb:5c:7f:26:bb:50:4e:d4:c1:
bc:1b:52:8e:8e:9f:8b:83:77:ec:ac:2a:b7:d8:de:ce:59:39:
de:ae:f0:ff:3e:89:8d:41:53:4c:ce:04:e3:8c:e1:fb:3f:a6:
46:1e:6c:91:2a:d8:53:bf:e3:a9:18:e8:d6:0f:4b:7b:47:08:
5c:8c:79:33:f5:63:05:13:6e:02:a5:21:be:5a:de:39:f9:bc:
5b:df:0f:21:cc:8e:3c:7c:e8:fd:bc:0f:2e:6b:ea:47:57:cb:
e2:9b:25:fe:c5:3c:b8:34:6c:af:a0:c4:03:d5:fa:04:7a:11:
d3:dd:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:10 2025 by rpki-client