Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: AJcACn331QV5c0toA3F5mrdGcJh+50eAkwiYXEfggb4=
Subject key identifier: 4F:E3:FB:89:A5:7D:53:29:83:A8:30:88:D2:38:9D:0F:FC:5C:6A:00
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 019A537640F4837F32AD86FABA08E7255FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0BF2
Signing time: Wed 05 Nov 2025 10:00:49 +0000
Manifest this update: Wed 05 Nov 2025 10:00:49 +0000
Manifest next update: Thu 06 Nov 2025 10:00:49 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: l9SfByCVVKs6oESbuHGSgxNZT8vdu8Ja4TaB1V5OS20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:40:f4:83:7f:32:ad:86:fa:ba:08:e7:25:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Nov 5 10:00:49 2025 GMT
Not After : Nov 6 10:00:49 2025 GMT
Subject: CN=4fe3fb89a57d532983a83088d2389d0ffc5c6a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:16:76:be:44:33:a1:14:a4:51:f7:cc:cd:
9c:8a:c9:ba:ee:bf:6a:18:59:5d:90:7c:6f:26:28:
0b:0e:d5:43:11:4d:2b:3b:75:f4:51:a6:2b:e0:19:
0c:2f:e2:13:ce:9a:e2:69:c3:22:32:7c:ab:f5:14:
f7:66:91:fb:1d:0f:3e:9e:e0:96:c0:87:cd:48:c5:
fd:76:53:e7:59:d9:ba:1a:6c:eb:98:1c:26:cb:37:
18:1d:f2:b6:a4:79:5a:51:03:40:ef:f9:89:7e:09:
f1:66:0c:7f:2d:3a:01:fe:64:a7:6f:1a:42:83:1e:
8d:f4:31:d8:6e:ee:37:50:74:a9:78:ba:2f:0e:89:
f1:8d:c3:dd:ed:e9:68:8b:97:12:7a:52:b1:93:b7:
c8:36:20:e3:1a:19:08:e1:4f:22:4e:68:59:97:b0:
02:75:d0:f0:7c:10:f2:be:3c:69:31:e3:1a:cf:f8:
b8:95:1f:4d:93:f5:72:6b:e2:9d:0c:42:74:ee:58:
b4:30:bd:9c:73:71:06:10:c5:7c:f3:66:dd:49:e2:
f7:4d:b5:44:78:9d:37:16:18:0d:06:fe:7f:d6:32:
84:29:e9:79:93:bd:0a:63:f3:ae:c9:96:36:2e:25:
97:08:b6:79:37:27:7f:28:6e:88:d8:cc:4a:99:84:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:FB:89:A5:7D:53:29:83:A8:30:88:D2:38:9D:0F:FC:5C:6A:00
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:7f:7b:79:e7:b9:d5:ae:df:11:aa:97:e4:78:5e:58:fb:
27:97:1e:72:ee:bc:94:71:6f:c6:c3:d4:61:6a:f5:55:4c:f8:
c8:02:c9:7a:de:af:bf:35:f1:54:87:67:ad:1d:7d:84:85:a4:
d5:05:bd:3c:d8:de:68:25:f9:f4:e0:03:56:54:30:4f:be:d2:
82:2c:f2:8d:4b:92:37:6a:d6:24:35:68:33:5b:7f:5a:cd:f2:
f9:b7:b8:07:9a:0c:47:a7:a6:f7:02:8e:3a:6a:31:b1:6a:12:
a6:46:f1:84:23:7a:d3:c9:1d:58:c3:c6:21:95:6f:9c:8e:9c:
a4:b5:0e:77:75:ea:8e:9d:45:58:ba:ba:b9:05:51:48:c7:e6:
21:b7:a4:58:a1:18:f3:fe:ad:1b:68:60:ef:c7:ae:99:c8:81:
a3:13:e8:cb:9f:49:1f:ef:74:68:79:44:63:09:3b:68:82:16:
a2:16:26:e0:12:58:62:20:be:7e:df:04:79:cb:d1:31:f5:13:
f1:bf:ea:3b:5c:0f:31:88:e2:b6:a2:5e:6a:ca:c5:ea:d8:7f:
1f:4a:d5:3a:53:5e:bb:51:07:02:6d:ef:82:ec:2b:71:0d:b0:
02:d7:27:b8:da:58:69:18:d1:5e:57:12:76:11:42:a7:8d:26:
2c:57:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:00:04 2025 by rpki-client