Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: UAU4apC+yLCXGkP0ddzrXHLxSjAIOtTCdazul+PA5Kk=
Subject key identifier: CA:77:D0:F0:90:71:61:A6:F3:F7:B8:77:E3:03:0D:0D:51:D5:61:3D
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 019A4EF57EC35555B35C2B9AC68BA9C80B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0A3F
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: n537qb6P74VcglQAUCHYpu0HF9kjOu2bnJxYvyo1wR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7e:c3:55:55:b3:5c:2b:9a:c6:8b:a9:c8:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=ca77d0f0907161a6f3f7b877e3030d0d51d5613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:1c:40:af:a5:f0:9f:f3:13:9a:44:8f:1c:
36:2e:43:d4:a4:f6:76:cc:2a:6e:4d:f1:ef:5c:f1:
5a:98:c8:a3:ac:3d:2b:3d:09:50:78:ac:9a:41:9e:
4d:9b:3c:17:c1:d3:e1:b8:46:78:46:09:67:30:b4:
1b:a3:7f:69:bd:2d:f6:8a:3f:fd:e0:12:49:03:30:
b0:e2:26:2e:1f:94:c2:ec:20:4c:ff:8b:20:53:da:
42:51:ea:24:6d:13:47:0c:49:7d:fa:ac:e3:15:26:
fa:d3:8f:eb:ed:ae:10:f0:1a:02:cb:27:89:f2:00:
02:95:02:48:29:1e:04:40:21:5b:a7:60:25:d9:36:
36:a6:4d:b7:ef:41:6d:35:df:24:c5:58:d9:ee:ee:
89:93:17:35:4e:1c:d5:ea:0e:d3:07:22:c4:b2:43:
40:86:b2:b4:42:c3:24:17:32:35:3a:a9:be:30:b4:
81:e1:90:6e:8a:6b:27:05:d4:da:bf:06:85:8e:8d:
ba:96:9b:3f:da:dc:0e:18:d2:94:43:92:68:08:cb:
f2:15:78:b3:4a:b9:e8:4f:14:fd:b7:9a:04:c7:34:
a8:5a:b0:32:6c:90:91:74:52:b7:81:fc:01:a4:ca:
82:51:62:53:d9:a1:e0:85:bc:e1:91:a6:e0:f9:16:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:D0:F0:90:71:61:A6:F3:F7:B8:77:E3:03:0D:0D:51:D5:61:3D
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d6:b4:98:b3:48:b8:60:7f:9b:1b:ee:61:0e:88:be:76:f5:
40:41:9e:4b:cb:fa:e5:c6:6a:ef:b5:31:24:3c:ec:11:ce:da:
b1:0b:81:66:87:25:7c:3e:52:f5:13:6d:ff:41:09:51:fb:eb:
3b:4c:24:6d:96:71:25:4f:2a:b8:d8:da:52:9c:cb:22:7d:14:
cf:63:5a:ce:b1:02:23:65:be:0a:5e:ae:0d:60:4e:9e:c7:14:
19:d1:5f:1c:e1:d5:a6:cf:8f:f8:03:f2:85:35:83:5d:b1:2e:
8b:ea:d0:fb:34:9e:fb:36:ea:dd:8d:59:43:b2:22:0a:41:6c:
b3:cf:f2:10:2d:be:ab:1e:03:86:ea:a1:87:63:61:31:5e:cc:
86:de:6b:5d:0e:bb:52:b4:a2:9c:40:f5:86:a2:0d:56:7c:b3:
ab:d7:b0:28:3e:2d:00:3a:3a:68:55:06:b0:b4:4e:84:bd:37:
74:fc:bc:be:93:d9:65:3c:03:73:a1:35:78:f4:1f:49:fa:54:
4b:00:79:f6:93:41:6c:c8:e7:be:87:19:d4:6e:b8:1f:ab:b1:
13:e0:f5:ed:a5:9f:55:b9:af:97:87:c3:a8:6c:6d:cf:72:a9:
0e:f0:91:3c:a5:30:43:2f:24:b4:5f:6f:1a:f4:ee:8f:a5:e4:
26:49:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:35 2025 by rpki-client