Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: sat2cFimjSaugwg3NFSjDcXjh5+KoPssOC1AEpcdsKo=
Subject key identifier: F9:AC:05:88:B6:AD:92:E3:88:AE:64:59:06:60:72:68:9A:62:F9:46
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 019A4D0667041E9C2F488F1F1B250FDA912D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 1192
Signing time: Tue 04 Nov 2025 04:00:56 +0000
Manifest this update: Tue 04 Nov 2025 04:00:56 +0000
Manifest next update: Wed 05 Nov 2025 04:00:56 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: lyOUlh9DhmNx01msq6Ukk8KFjSbcyBCXf75+Xbdmjhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:67:04:1e:9c:2f:48:8f:1f:1b:25:0f:da:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Nov 4 04:00:56 2025 GMT
Not After : Nov 5 04:00:56 2025 GMT
Subject: CN=f9ac0588b6ad92e388ae6459066072689a62f946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:b9:ba:f5:d8:18:9f:20:bb:c3:4c:68:db:
23:6a:39:a9:e4:a7:e3:f6:2d:96:b4:12:3d:58:5b:
1c:f8:77:68:5a:47:ac:b1:7f:b4:34:20:ef:1d:70:
0d:85:94:a9:b3:8b:3d:49:47:13:3e:63:98:e9:cc:
6a:0e:c1:26:68:99:cc:96:80:32:e2:cf:00:55:ab:
85:ea:96:2b:eb:1d:24:91:73:96:5c:34:1f:1a:f6:
29:92:6a:25:04:68:73:9b:db:c7:64:f4:8b:90:f9:
04:50:1e:4e:2b:1d:a5:f4:b9:ec:7c:c1:ed:ee:0f:
9f:5c:83:44:48:9d:d0:0b:bf:a9:6a:42:c2:63:06:
96:83:f4:7f:3a:2a:4c:5c:9f:ae:50:94:65:3c:3d:
f9:16:eb:ec:fc:cb:af:0b:35:99:66:01:f0:1e:ff:
dc:f2:18:1e:53:83:46:6f:da:84:e9:11:ca:ad:b4:
0b:55:7d:ed:90:65:d4:91:35:7f:43:ac:0b:54:1b:
02:98:56:7b:95:58:14:85:64:16:a1:72:94:5c:9f:
10:c9:2c:8e:5e:ee:fa:1b:b1:ab:1e:97:f3:59:a8:
b6:93:12:19:dc:90:ed:6f:d8:e9:2a:ee:53:ab:53:
30:ca:81:e1:4b:cc:30:80:c9:6d:d6:ac:f0:aa:3c:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:05:88:B6:AD:92:E3:88:AE:64:59:06:60:72:68:9A:62:F9:46
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:91:ad:ce:fd:03:6c:50:b7:4e:a2:85:b7:f0:5e:26:5c:32:
da:42:a3:67:cb:4c:57:c4:12:d9:c0:f6:56:85:d9:59:1c:76:
aa:30:dc:c3:b7:34:ee:a2:de:54:c6:a2:be:2f:d8:a6:59:c1:
6e:16:19:18:7e:a0:01:4e:f9:ef:23:1d:6c:36:09:37:22:19:
55:0a:6b:c2:f3:14:1a:4b:b6:e2:22:3a:15:ee:72:8a:68:f8:
b5:e3:81:b4:c0:17:8b:f7:52:e8:4f:16:04:76:3d:02:2f:29:
17:e7:a2:a0:e1:55:fa:5f:40:54:94:35:36:2a:f2:4b:09:73:
92:55:15:f7:53:4b:37:59:e6:ea:b8:a9:99:0e:db:5a:48:fc:
a9:03:ec:cc:b3:0c:a6:0c:a2:90:27:6b:97:de:31:86:5c:4c:
1c:68:27:bd:28:b2:bd:25:8a:01:ef:4b:9a:71:32:20:36:f1:
b4:d5:f9:71:75:75:76:d5:8b:36:38:f0:33:f1:da:0a:0e:43:
93:e9:b7:30:25:f5:db:6d:65:57:e3:13:c4:1f:91:7d:51:23:
8b:72:09:f8:78:06:74:35:f4:47:98:b3:25:78:be:ae:e8:13:
0c:f8:c9:c7:53:06:2c:80:8a:fe:42:f8:b3:c2:42:07:77:4b:
a8:26:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:50 2025 by rpki-client