Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
File: Vu9y3nfRt-K0RwW2y85jlCHam-8.mft (raw, json)
Hash identifier: qwpppvMVmpwKRDo7EPSbw33Bvdq1XCZmwrC+P0MZLzA=
Subject key identifier: 1A:38:FA:0E:2E:80:9E:84:9C:69:81:08:C6:53:25:2C:42:2C:1B:09
Authority key identifier: 56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
Certificate issuer: /CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Certificate serial: 019A5150F96DF2E260BD526E36C2F83BF894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
Manifest number: 0550
Signing time: Wed 05 Nov 2025 00:00:52 +0000
Manifest this update: Wed 05 Nov 2025 00:00:52 +0000
Manifest next update: Thu 06 Nov 2025 00:00:52 +0000
Files and hashes: 1: Vu9y3nfRt-K0RwW2y85jlCHam-8.crl (hash: Q9wOR8Z2lJWZdk6xu5a83vKo6MDCPWb5j+A11aQNf1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:f9:6d:f2:e2:60:bd:52:6e:36:c2:f8:3b:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Validity
Not Before: Nov 5 00:00:52 2025 GMT
Not After : Nov 6 00:00:52 2025 GMT
Subject: CN=1a38fa0e2e809e849c698108c653252c422c1b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:2c:8c:57:37:d8:41:4b:e8:c7:8b:29:e9:
35:00:8b:74:2c:f7:5e:31:b8:89:61:e1:53:12:7c:
91:1d:e1:2b:6d:f9:08:d7:1b:db:af:bc:b2:f7:97:
4e:5a:76:01:20:16:dc:b2:fe:2d:d5:4e:06:d4:7d:
af:6a:6b:58:33:9b:af:57:3d:37:b9:78:e9:fc:42:
94:e9:2c:4e:e3:aa:0c:e6:0f:04:43:35:52:30:86:
c4:cb:83:7f:b4:31:2c:fc:c3:16:98:c9:38:b0:a3:
1f:40:ff:8e:b6:b4:7f:fa:6b:93:8c:ba:a4:c7:1d:
dc:45:20:7c:16:46:77:7b:50:59:c1:58:32:8b:9a:
50:71:b7:52:de:2a:b7:98:3d:8b:a9:7f:6a:e4:49:
51:34:3a:2d:86:72:4f:d9:49:53:7e:eb:7e:83:0d:
6b:52:b5:14:f9:aa:1f:b6:51:2c:17:88:95:3e:5b:
c4:76:79:51:9f:cf:82:ef:41:63:3e:1a:ca:53:6b:
27:f2:8b:da:3b:14:b6:34:ec:cc:9a:2a:30:db:58:
34:ce:08:5c:a0:5e:5d:cc:99:b5:2f:f0:f4:36:02:
14:f5:0d:2c:5b:d3:47:2c:3b:97:c0:c2:4d:ca:c8:
b0:cc:49:bc:cc:e6:52:74:77:1c:10:f0:8c:f8:6f:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:FA:0E:2E:80:9E:84:9C:69:81:08:C6:53:25:2C:42:2C:1B:09
X509v3 Authority Key Identifier:
keyid:56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:e2:d1:2e:ab:dd:da:96:57:95:5b:8b:13:7a:c9:ff:c2:
b2:e6:cc:1f:a8:1d:83:dc:f2:9e:d0:ed:ed:f3:6c:09:3c:15:
28:ac:df:38:91:f7:85:aa:22:a3:6a:2c:9c:bb:58:5c:96:18:
0c:ef:9a:51:60:26:16:94:80:05:83:f6:2f:bb:10:84:76:65:
85:d7:cc:7d:65:d6:ae:b1:23:91:10:31:16:65:22:db:26:09:
d2:d7:ac:07:9c:76:8f:5c:cc:f8:89:53:a7:54:bf:0c:7d:8c:
3b:e4:6d:01:b8:b6:8d:2f:45:9b:28:56:c5:67:a9:3b:30:38:
70:26:ea:7d:a2:01:d5:c5:12:b1:74:19:8a:be:9c:c9:db:8b:
dd:b4:5f:4c:45:a0:e3:6a:12:63:29:73:f8:c8:ba:ca:c9:36:
ba:30:19:7a:49:42:4d:14:b5:3b:ee:f2:37:06:55:5f:2b:e0:
6e:91:c1:57:ca:05:d3:71:4f:52:fa:67:34:5e:23:39:31:1b:
15:4f:56:4f:c7:8b:75:13:42:da:6a:86:36:b0:6f:bb:e6:c3:
95:84:70:84:6d:3d:b3:da:79:ab:a1:76:d0:af:95:28:ad:04:
33:70:93:8f:b6:92:90:30:cc:9f:e5:39:52:02:e4:b7:b9:89:
84:38:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:32 2025 by rpki-client