Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: A2i6te2dBjgnGxgHPENZXHj2/QS9isZVp4w8i16D3k0=
Subject key identifier: 86:0E:CD:EE:F9:F9:DD:CF:EA:32:8F:43:AD:2F:0F:AB:93:1B:F0:5D
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 019A7112C992B1B348B303A8C3C9BFD699E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 14DA
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: 3v4JAF10v8QzDhzYeOjGl9o6UFikpiuLLam4mYuoCBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:92:b1:b3:48:b3:03:a8:c3:c9:bf:d6:99:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=860ecdeef9f9ddcfea328f43ad2f0fab931bf05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:3b:fc:4e:59:31:59:eb:6f:17:09:0a:a2:
12:94:24:2c:be:1d:d7:87:4d:5d:19:b8:a3:a1:57:
da:d6:86:0f:70:e4:94:6f:54:bc:d0:31:44:3d:c3:
4e:af:b4:76:69:af:76:16:5f:60:e7:6c:01:1c:52:
3a:ca:db:b6:d0:4b:a5:4a:d0:6b:0a:4a:28:d1:6f:
14:45:64:08:f6:6e:c2:5a:3a:9e:5f:99:62:61:f5:
f7:75:d5:6d:7a:21:46:db:04:d8:7e:45:51:38:4b:
97:a2:97:a5:7a:be:ed:b9:73:af:f5:fd:1c:11:cb:
6a:68:f6:41:06:bc:1d:f1:56:ba:a3:4e:ad:ba:a1:
c8:18:8b:26:6b:f8:9b:9d:e6:8c:c4:2f:20:d4:bf:
d5:8d:ff:3e:23:9b:ef:9d:9c:46:2b:5e:27:5f:a3:
60:dd:36:9c:58:76:fd:97:e3:b2:09:c3:79:c3:4f:
8b:d1:0e:bf:a8:ad:c8:b9:d7:d4:5f:6e:87:2b:77:
ad:51:f2:d6:0d:23:b1:6a:3e:ec:26:d1:db:5a:f7:
eb:ab:ab:c4:14:fb:de:25:ec:44:f1:7d:ab:fe:1c:
83:24:33:44:17:cb:35:df:f3:13:f5:10:e0:22:62:
ba:b3:9e:92:3a:df:6b:2b:b2:52:88:88:0d:03:91:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:CD:EE:F9:F9:DD:CF:EA:32:8F:43:AD:2F:0F:AB:93:1B:F0:5D
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:4a:af:ab:61:c0:0c:ea:e2:8a:dd:98:1c:ba:af:2d:19:
5c:48:19:ec:12:a6:5a:92:2c:8b:58:6c:7f:c5:fc:f5:1f:3a:
dc:69:96:90:08:72:b5:41:79:92:4e:b0:53:a5:d2:0a:63:fa:
e6:57:a6:b7:82:54:90:f2:c8:eb:84:9c:92:2e:b8:1c:66:47:
1b:75:43:5d:a5:25:f3:c0:8a:82:1b:3a:03:96:a2:d3:4a:18:
25:b8:d5:c8:6e:bf:d2:1f:7e:5a:fe:b7:7b:c7:ed:00:80:14:
2c:03:a6:c4:e3:2f:f3:de:c4:67:a9:be:64:41:41:ca:8c:aa:
b9:bb:16:6d:0f:b5:02:4e:1a:21:74:69:f2:39:c3:18:e1:c8:
ca:e4:c0:a1:8d:0e:63:f5:af:c1:26:e7:29:34:e9:00:c5:a3:
fe:98:81:74:91:f4:7c:30:bc:7e:1d:b0:d8:36:91:43:a9:36:
1a:41:56:00:fc:97:6a:fd:37:e4:c0:1d:de:f0:37:2d:f4:df:
e8:1a:bb:7a:6c:2d:7e:9a:fe:a0:83:be:92:fe:d0:04:80:07:
e5:9d:a3:16:f9:e1:3d:10:02:9c:96:bf:78:63:30:cf:bd:c4:
0a:62:83:46:41:4d:68:7c:62:a9:77:29:8b:e6:30:e7:7f:ab:
03:3f:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client