Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
File: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json)
Hash identifier: rGkS/oEjDKUtLGwFMUHl6nmsEinX8wYHSdgQUVj5YkA=
Subject key identifier: 06:BC:B9:5A:C9:FD:34:8A:30:A3:C9:E7:DD:1E:2F:27:E6:29:77:B3
Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF
Certificate issuer: /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
Certificate serial: 019A4EF481F2C293DB7988DCAAEA87E9BDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
Manifest number: 16C8
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: 0fuigax0Y9jODEYowZPm11znc30tQao0oX1xfp1Deo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:81:f2:c2:93:db:79:88:dc:aa:ea:87:e9:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=06bcb95ac9fd348a30a3c9e7dd1e2f27e62977b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:b4:01:2e:b9:33:47:af:4d:9c:4f:0c:dc:
72:41:34:71:63:95:be:c0:1c:c7:c4:cf:7f:c4:12:
e9:e6:60:ee:70:5b:92:14:d5:99:49:97:48:ce:89:
b2:db:20:cd:a2:3e:f3:c8:9f:54:29:ec:4c:10:3c:
64:41:42:88:db:31:4c:ed:4b:7c:79:7b:9c:c5:7f:
d0:6c:64:87:2d:d9:c6:fb:63:1a:2d:4a:57:ac:e4:
5c:fb:aa:c1:af:d7:6e:18:ad:31:94:be:22:f9:44:
a9:f4:46:92:ca:83:bc:7e:79:0a:21:09:1b:87:26:
16:a6:0f:bf:d4:a8:9d:ae:08:20:46:56:94:fc:c9:
48:d4:74:43:45:76:b0:a5:88:63:b4:02:6f:69:22:
eb:56:f6:38:32:52:b6:8d:81:12:23:e0:ac:7a:02:
a9:39:cb:0c:c5:a8:8d:c0:80:33:86:f2:11:0b:5a:
c6:9c:d5:ed:44:83:da:25:09:28:c0:f6:8e:81:6c:
bc:f4:b2:48:be:15:5c:73:2f:e8:91:a3:93:0f:36:
90:3b:e2:85:7a:b9:a4:c9:2b:d5:34:23:b7:86:e2:
25:29:9e:d5:8e:33:b7:3c:cd:3e:c2:b0:c3:65:e7:
5f:25:fc:06:14:43:a7:d3:56:dc:87:85:43:cf:10:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:B9:5A:C9:FD:34:8A:30:A3:C9:E7:DD:1E:2F:27:E6:29:77:B3
X509v3 Authority Key Identifier:
keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:50:7e:db:80:c0:f8:81:af:4a:66:ac:20:a9:7c:03:a4:70:
c1:24:04:a2:8c:17:88:c3:b4:9b:4c:72:d1:c5:13:ed:be:6b:
40:01:f2:bf:e0:91:41:25:d3:62:ef:00:72:de:2e:51:10:01:
7d:ec:4c:cf:2d:e1:c1:52:76:41:2a:87:17:c8:f3:b0:86:a4:
a5:cf:26:0b:92:c6:30:ba:13:8e:9f:93:31:37:26:bb:bf:1e:
b3:39:36:38:0a:e9:26:e2:39:1a:51:98:ff:16:77:db:02:b7:
57:cb:1b:61:d7:0c:6d:76:4f:6b:94:6b:ad:1e:d6:ab:cc:e2:
03:95:5e:96:6c:52:a9:5a:97:05:a6:3a:ff:66:1b:f4:ea:a7:
d4:09:5a:7f:a8:5a:cd:06:e6:ba:28:35:ca:65:73:43:27:2f:
17:43:b6:22:fe:0b:f9:89:bc:3d:0f:e3:42:02:2b:c2:e6:82:
80:87:7e:72:72:be:25:d9:83:f4:ff:d4:84:52:cf:78:0c:80:
5d:7a:fa:be:1c:a1:6c:12:51:da:f9:63:4e:7b:10:bb:b9:f9:
bc:ad:cf:52:52:5b:05:46:8c:bb:34:45:d2:76:08:32:01:82:
98:95:b0:a5:88:0c:61:fd:04:df:40:0c:f6:0b:d0:f2:0b:67:
15:ec:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:44 2025 by rpki-client