Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: GkZbr5x0rierGccadWR7ntxBzm7dNPC+FAmROIFB1gU=
Subject key identifier: ED:33:1F:DA:E4:E2:CD:58:6E:E1:79:F6:0A:9E:AA:CA:77:3B:5D:A1
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019A4F61FB16E6E7D9B1AB6280F2E0627141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 15:00:12 +0000
Manifest this update: Tue 04 Nov 2025 15:00:12 +0000
Manifest next update: Wed 05 Nov 2025 15:00:12 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: aC98/KknYiRmhPyW+wphXlRLyfmtOvrvPl0Oe4uWJgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fb:16:e6:e7:d9:b1:ab:62:80:f2:e0:62:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Nov 4 15:00:12 2025 GMT
Not After : Nov 5 15:00:12 2025 GMT
Subject: CN=ed331fdae4e2cd586ee179f60a9eaaca773b5da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:ac:73:ce:9d:5f:97:5e:0e:8a:f2:8a:9a:
e4:10:3c:bb:5b:32:d2:f9:90:3d:df:fa:1f:e3:ca:
27:21:60:af:90:45:95:74:e0:d8:cd:7b:f8:48:03:
3a:59:38:fa:5e:45:c2:98:aa:06:90:5c:9c:93:e6:
ec:cd:f2:5f:d2:f5:0a:a6:be:a9:f0:05:c2:e5:cf:
26:c0:e8:24:aa:28:6c:25:1d:5b:71:c6:8e:de:6e:
27:88:10:98:e7:64:ed:a1:5d:fe:88:c0:d1:3f:f8:
32:f0:9b:5b:e1:c6:db:f1:c5:88:4c:ad:72:dc:d2:
5b:f4:dd:94:bc:c6:62:f4:de:50:34:ee:79:d7:40:
0f:06:fe:09:36:4a:2b:48:df:7d:59:c0:66:d0:ba:
ef:64:92:73:c4:55:0f:de:7f:c7:ea:96:c3:5f:3e:
86:13:11:7f:39:9f:e7:ad:7b:d4:6b:56:ea:7a:03:
9a:be:c3:6d:9c:f3:25:9a:49:ef:c9:e6:49:9e:36:
21:ac:78:7c:8f:30:d8:3c:ac:12:b0:da:d1:31:91:
08:71:4d:25:e2:c1:c8:c5:3b:06:20:28:ff:a5:da:
f1:af:a9:ad:3d:eb:71:48:bc:1c:8c:2b:43:a4:58:
c1:e5:52:ba:78:0e:1d:ea:5c:49:65:11:53:ac:f1:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:1F:DA:E4:E2:CD:58:6E:E1:79:F6:0A:9E:AA:CA:77:3B:5D:A1
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:3e:59:0c:f6:26:a9:99:b0:d0:9f:01:b0:d0:c5:a6:c9:
39:52:5b:21:3e:8f:ad:dd:d1:28:4b:e4:dc:bc:a9:30:da:e2:
5e:2b:cc:11:6a:c2:7f:d1:d3:92:93:a7:7f:d8:d2:46:71:36:
ab:fc:d4:a3:b6:99:43:97:19:03:13:01:bf:6c:81:06:89:1f:
81:2b:de:81:a7:68:45:21:c9:1e:ac:2a:f0:26:1c:f4:74:f5:
c8:e1:d9:24:43:4d:4e:b3:ca:a3:3f:2a:a1:76:b5:3e:52:61:
ce:a3:20:fd:79:5d:f2:cc:3c:24:3b:d5:e0:fa:2f:59:eb:5f:
74:d2:25:94:31:ad:4b:70:51:d1:df:52:48:68:8b:b1:52:a3:
ef:06:89:36:52:71:7b:be:9a:ba:0a:c0:e2:c6:6d:27:f3:af:
60:23:ac:6b:9d:0e:bf:b5:d3:4c:d8:41:a8:3b:a8:9c:2f:de:
d0:ec:07:9c:40:65:2d:30:98:1b:52:19:6f:87:c0:c9:99:48:
62:20:e7:e3:6e:6e:04:08:e8:5d:4c:44:66:78:b7:3e:65:ae:
cd:9b:84:2d:2e:b8:08:74:7c:c0:96:53:76:a3:df:1f:17:57:
60:18:49:5f:fd:81:82:88:62:0f:fe:b7:29:e7:8b:d5:6a:f5:
c0:04:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:35 2025 by rpki-client