Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier: oc7VeQUvle2ZVnin2wWHWszz0JHlfNn7oDA3CPjmqL8=
Subject key identifier: EE:D4:60:0D:7E:2B:21:9A:AC:24:B9:2B:9E:E8:25:68:B9:EE:78:66
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial: 019A71B93FA73F0739139B3C7ED736A0BF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number: 09BB
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: Lopha72pzLmG81VJwHa6QcRZRiN8O2eZ4YCqBap7DnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3f:a7:3f:07:39:13:9b:3c:7e:d7:36:a0:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=eed4600d7e2b219aac24b92b9ee82568b9ee7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:f6:a6:18:3c:01:f8:77:38:4b:26:1f:b2:
3d:02:42:cc:40:68:cc:84:48:92:9b:c8:89:08:d3:
42:c3:7e:8e:37:07:a9:85:e3:52:d5:79:40:ec:59:
a2:20:86:c0:84:1f:00:12:72:ab:6f:a6:5c:ed:3a:
ce:d8:05:52:a1:02:60:26:e8:f2:1f:36:af:42:82:
d4:22:aa:c7:34:66:80:38:9b:50:02:9b:9f:8f:f5:
2d:7f:65:f2:b7:ae:f9:1d:46:e6:8b:b1:4f:35:aa:
74:97:19:ce:f6:2a:0a:a1:d5:15:5f:55:89:8b:f3:
aa:48:fb:dd:13:5e:00:5c:4c:c7:d1:09:f7:f4:5b:
d7:f6:d9:eb:3a:89:64:cb:2e:7c:47:d7:70:e4:a2:
df:d1:d5:82:eb:51:4c:e7:10:f8:f9:8d:32:37:84:
29:32:88:d8:37:b7:e1:c4:08:b7:70:2f:02:60:5a:
b5:23:56:73:54:95:42:f6:05:28:e3:7e:ce:b6:42:
53:93:a5:a2:6c:b6:9f:b2:be:39:b5:bb:21:81:87:
5a:c8:7c:b8:6b:8c:ad:44:a7:8d:ea:7f:56:12:da:
e3:7d:6a:ec:9e:95:7f:7c:be:08:5d:0c:1b:c9:0f:
18:99:2f:44:65:b0:00:11:25:f2:64:79:4a:29:99:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:60:0D:7E:2B:21:9A:AC:24:B9:2B:9E:E8:25:68:B9:EE:78:66
X509v3 Authority Key Identifier:
keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:4c:be:73:af:6b:8a:66:8f:f0:b4:bb:9e:af:59:66:a1:
94:41:74:2a:02:79:b4:b1:59:79:5c:4f:92:a9:fd:37:45:49:
7a:f1:06:92:2a:87:af:16:72:5e:52:4a:f5:30:05:64:a3:cc:
0d:52:c7:84:70:30:15:77:45:e6:52:29:a6:b8:46:0d:d6:1c:
74:a3:96:4d:22:78:1f:ce:a4:d8:44:3e:3b:76:2c:95:c4:ab:
33:1b:40:c2:f2:ae:de:4d:81:2a:55:5d:31:02:42:8e:c7:9d:
b2:d8:d6:4d:d6:ac:43:e0:4b:24:b5:4a:2e:7b:2a:f1:6d:cb:
fe:a7:f0:8b:1f:6d:a1:8e:5d:f1:0d:95:9c:3e:d5:ef:d8:f7:
40:cc:4f:8c:46:63:e7:24:b6:76:b3:9e:5c:fd:5d:47:6e:3f:
9c:ab:ab:f2:4a:cb:79:56:31:ac:03:23:05:8f:4c:07:c0:57:
90:b2:12:92:a7:f5:34:c3:0f:e4:69:ee:84:bd:bf:88:97:58:
9e:3c:97:b0:58:76:f8:a1:da:11:7d:db:f5:5c:e3:25:ec:f3:
c6:14:11:f9:b4:8c:b2:2b:82:cd:c2:65:66:8f:7b:28:c3:a8:
82:06:42:4a:4f:91:53:97:19:c8:26:5d:b8:ab:f1:79:4e:45:
b1:ff:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:49 2025 by rpki-client