Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: 0o2toqZfWi0kRghcBHVYGM3KcxOzBTNfbL3IkVwnoxo=
Subject key identifier: 84:3E:2E:65:D4:DC:35:0E:60:73:06:AF:0A:5C:04:FA:0A:CD:4B:4D
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 019A4D06BF311043F7CEFCC8327211841770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 07F5
Signing time: Tue 04 Nov 2025 04:01:19 +0000
Manifest this update: Tue 04 Nov 2025 04:01:19 +0000
Manifest next update: Wed 05 Nov 2025 04:01:19 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: YqvZipAJIhV/1ldGpAAYGfs52gnHi0Qmz1AVvjrdeu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:bf:31:10:43:f7:ce:fc:c8:32:72:11:84:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Nov 4 04:01:19 2025 GMT
Not After : Nov 5 04:01:19 2025 GMT
Subject: CN=843e2e65d4dc350e607306af0a5c04fa0acd4b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:08:06:ae:b7:31:31:cd:b0:2b:82:93:cb:
be:d2:f1:ab:fc:21:f6:20:7e:cd:6d:d4:99:8a:ed:
15:5c:ac:92:7b:30:e8:c2:13:3d:a1:37:ed:a8:fb:
f7:c4:62:37:4e:d2:0d:79:7c:56:46:d6:78:02:72:
bd:c1:07:31:54:ab:64:40:9b:7a:ba:0e:7a:c7:b2:
b5:38:95:80:a5:64:fc:52:78:18:d3:36:a4:a4:b5:
45:a3:6e:8e:76:88:c6:53:af:94:22:10:69:e4:37:
31:50:64:28:19:25:9d:b2:2c:48:af:4b:a6:e7:50:
c2:89:df:bf:a9:66:52:77:84:3e:02:83:f6:72:ce:
f4:be:57:f2:00:f1:66:73:ca:c3:e5:b7:66:18:e9:
a9:3a:f3:43:58:bf:3d:42:bb:4b:f4:50:01:c9:55:
12:4c:38:bb:16:47:2d:cc:f7:d0:ef:f4:d8:95:be:
d2:ad:8a:5f:85:39:65:0a:48:f5:b1:43:55:9c:9a:
cb:ec:99:db:5e:1a:72:3f:cb:b0:3a:fe:06:45:8c:
6d:e9:19:2d:bb:40:4a:0e:e6:8a:2e:fe:9c:7f:52:
23:b9:43:27:dc:fe:d8:a6:85:4c:c4:f6:ea:d9:00:
f2:a8:ce:68:1b:c9:3a:fe:13:11:87:f1:d0:84:4b:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:2E:65:D4:DC:35:0E:60:73:06:AF:0A:5C:04:FA:0A:CD:4B:4D
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:55:1c:a0:ed:2a:da:ed:e4:a8:d7:86:7e:df:6a:8b:3f:ad:
2c:13:f1:39:b4:66:87:43:f8:60:b5:4a:b9:14:c8:04:d6:d7:
c6:07:32:1a:6c:ab:67:ba:8c:a3:18:b5:1a:57:4c:3d:dd:10:
ac:e9:ff:c5:88:4f:fc:c4:2a:d1:a8:ed:0e:df:78:af:d1:58:
72:f0:4d:42:60:aa:6d:69:80:13:d6:a0:ee:a4:74:f5:1f:9c:
36:11:c5:1b:35:98:db:4b:5d:51:91:a1:f3:88:28:e1:b2:ff:
d3:30:c0:b0:94:19:90:49:4f:37:f4:c2:bb:e3:d0:87:e7:a8:
d9:79:6c:57:61:65:d0:9b:5e:c7:7b:6e:e2:86:2e:3c:34:80:
8c:89:22:a8:21:2e:f1:4d:f3:a4:a1:3d:57:5f:2a:2b:8a:8a:
23:d9:a5:aa:7f:3d:1d:81:91:5e:bd:05:9d:e0:4f:a0:d6:31:
33:ea:52:57:61:33:f6:5f:df:ba:0e:12:39:e9:1a:72:e9:7d:
58:6a:1f:9d:ec:a8:98:27:77:f7:a3:92:cf:8a:06:60:d4:00:
35:6d:f8:d5:3d:ed:3d:13:2e:85:46:d0:af:9a:81:55:72:ec:
a5:95:9a:8b:a3:0e:b2:45:2d:ee:26:4a:b1:c6:fb:56:ce:e8:
bd:c6:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:54 2025 by rpki-client