Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: xZJ1uzCAiwQNxhrkVa31YEBjGHWBGNgPRcEmJHGH7YQ=
Subject key identifier: DA:D7:85:97:B4:60:C7:35:B3:DB:CC:8C:1C:EB:25:4D:DE:88:50:84
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 019A50E3584E9BC77DC5A4C9C5562A561ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 066E
Signing time: Tue 04 Nov 2025 22:01:07 +0000
Manifest this update: Tue 04 Nov 2025 22:01:07 +0000
Manifest next update: Wed 05 Nov 2025 22:01:07 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: cOaxr0VgEvgwKnFjB5VnxOMM8O1PY8DUvHjpQHj4LBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:58:4e:9b:c7:7d:c5:a4:c9:c5:56:2a:56:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Nov 4 22:01:07 2025 GMT
Not After : Nov 5 22:01:07 2025 GMT
Subject: CN=dad78597b460c735b3dbcc8c1ceb254dde885084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:37:99:2f:45:87:0a:10:47:37:7b:af:ab:
76:6c:d2:07:70:c7:23:fe:a4:b8:9e:2b:e5:8a:1e:
b3:85:5a:8e:8d:81:70:6e:67:68:8b:e2:7c:86:28:
21:27:b6:99:92:4f:4a:14:9d:01:c8:b6:f1:4c:07:
76:af:90:81:de:dc:3b:8c:a2:c7:67:46:e1:f4:9d:
c5:1f:33:70:f2:61:6d:09:b0:e6:c7:35:2d:3f:c8:
de:8b:eb:6a:a4:e0:69:b3:4f:31:56:38:31:3f:c8:
a2:9e:3e:c6:56:59:33:4d:e4:66:83:3d:27:5e:7b:
2a:96:42:a7:64:ce:de:42:56:1d:b6:c0:33:fa:78:
7c:88:17:10:c8:e7:27:7a:ec:c5:4a:b7:2c:15:44:
ed:6f:62:55:bc:b9:ec:f3:c4:78:3c:98:93:3f:a1:
61:4d:d7:bc:d2:b5:0d:3f:40:18:3c:97:cf:4d:c9:
00:61:7e:97:4d:cd:d9:fb:f1:0d:8c:54:3c:fb:f6:
ab:ac:51:77:17:13:e2:fd:4c:3c:26:b5:41:45:8d:
da:2f:d6:dd:b9:18:48:22:0f:c4:a9:41:cf:b7:3d:
4d:a3:62:8b:52:f4:07:97:17:e0:f1:7c:43:90:2c:
3b:6f:78:b4:51:fc:c3:6e:7f:b5:f5:94:81:de:91:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:85:97:B4:60:C7:35:B3:DB:CC:8C:1C:EB:25:4D:DE:88:50:84
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:dd:31:c0:28:9b:c6:31:ac:82:42:9e:38:a2:eb:55:23:
e7:05:76:50:f7:19:01:56:6d:f8:13:e3:81:de:d8:8e:3d:96:
3e:80:41:26:3f:32:ad:c6:b7:87:f3:d7:a1:8a:e1:09:91:58:
a1:94:3d:ac:cb:07:95:08:90:7e:97:5f:08:cd:81:be:cc:77:
46:b7:b0:8b:a0:f2:78:ae:ff:63:8c:07:a7:35:c8:25:18:6c:
1e:f6:60:2b:19:38:db:79:82:e0:83:af:03:e7:d4:93:5e:a1:
65:24:b3:84:ab:9a:01:a4:e4:78:8b:99:28:bb:53:a8:4f:a1:
47:6f:61:07:77:2c:94:ef:ab:08:d1:87:e8:cf:6f:6b:e4:4f:
fd:35:19:9f:32:06:47:a8:d7:27:d8:b4:63:f5:95:e0:d1:c9:
18:22:d5:4d:e8:a7:3b:f3:0b:ca:88:5a:5d:b2:72:ce:51:6f:
47:83:df:08:e3:9a:bf:73:6a:a8:34:b9:0b:93:a0:18:f1:ab:
15:fd:03:cd:92:98:e2:cd:21:a6:6c:3c:e7:c4:4e:2d:db:0d:
68:e0:ca:df:13:95:12:52:f9:7a:bf:16:40:32:75:7c:54:44:
d3:dc:51:4d:52:38:21:be:32:bc:8a:3d:ef:20:61:59:45:9e:
29:32:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:14 2025 by rpki-client