Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: HO40z1f1voOGTFiAjUTNCycKpbra7+LiRSbJ/bQ/+Uc=
Subject key identifier: D5:E2:98:C3:6B:00:3B:43:FB:74:C3:DE:EC:74:78:8E:F5:73:E7:ED
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019A7226246E8E10B362E31FF5FD672E09AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 143E
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: zf2+BxQZu4GoLAOX+tDQITJMa6xnwzxsw+dO76Z51Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:6e:8e:10:b3:62:e3:1f:f5:fd:67:2e:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=d5e298c36b003b43fb74c3deec74788ef573e7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:f3:e4:68:67:7e:8a:bf:60:48:d6:8a:c3:
50:bd:ce:e8:7e:67:4c:18:0b:22:9c:69:08:e0:61:
7e:42:3d:3e:be:5b:06:59:08:98:5b:cb:96:54:e4:
05:42:f8:a1:8f:6c:b1:a8:f4:e2:31:72:db:ed:ab:
b7:90:6e:15:56:ee:10:a7:a3:76:44:ab:21:34:71:
bc:24:3a:4e:f4:f4:91:9e:69:36:3d:dc:60:d1:43:
74:6c:91:11:a8:aa:79:ff:34:c8:82:d4:d7:1a:e2:
a9:a3:21:53:fc:82:a9:7c:07:82:62:f0:84:8c:52:
00:f1:71:73:6b:0f:03:c6:33:19:39:c8:86:30:3d:
d0:67:86:4e:4d:d0:84:17:d7:5f:85:52:1a:33:43:
48:9f:6f:b2:24:2a:f5:4b:64:02:23:09:b0:93:63:
d0:2f:0e:6f:31:f8:1d:4b:16:4e:f6:fb:74:6d:9a:
0d:69:55:03:6e:01:79:f4:61:36:bb:d2:97:4a:4c:
50:11:28:1f:b9:fb:cd:44:3b:7e:df:cc:45:4a:98:
15:cf:ae:db:0a:db:85:f9:c2:d6:5e:a4:1f:5b:fb:
7e:04:8d:7d:7c:c1:47:04:52:6c:96:10:38:81:be:
79:d9:92:c1:f8:68:9f:b8:76:50:cf:36:b6:85:41:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:98:C3:6B:00:3B:43:FB:74:C3:DE:EC:74:78:8E:F5:73:E7:ED
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:f9:07:2e:dd:40:09:76:f7:f9:04:c3:8a:96:58:36:11:
cc:fe:fc:eb:5d:1e:b7:85:98:77:15:2c:47:f7:f8:fa:fe:e9:
f2:db:ae:d0:d9:af:41:99:d5:cb:2a:d8:fd:53:a5:2c:77:d2:
1b:5b:87:54:1b:8e:6d:59:5d:06:77:64:64:f5:e8:1d:93:25:
dc:43:e6:6a:7d:a7:16:10:18:3f:5c:1e:94:ed:f3:cb:1c:55:
17:2c:78:71:99:a0:0d:cb:e5:03:48:28:57:74:99:cf:6e:90:
3e:c9:5a:bf:bc:ea:80:bd:1f:d2:a6:a6:56:e6:ed:20:8a:8c:
e5:05:f4:3d:37:10:92:61:6b:5e:87:04:cb:75:6b:77:01:f3:
fd:7b:6f:63:63:fd:1d:49:1a:4a:b4:2c:dc:d4:f2:f7:b2:24:
ca:c6:1c:c9:16:64:4d:bb:86:20:f7:ad:09:80:41:7d:b1:8f:
0b:6f:f2:4e:76:8a:fc:dc:3e:37:21:f8:c6:a8:6e:16:e9:15:
00:46:65:3a:e0:30:be:0e:1e:04:a5:b8:fd:d7:f3:93:6b:2c:
7d:bc:6c:32:3d:d6:ec:f9:6d:c1:9f:cc:cc:00:2a:60:d7:ab:
ff:b7:c6:e3:f8:ee:f0:3f:1f:b7:e9:e7:c4:45:89:ea:36:b8:
22:c1:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client