Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File: VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier: uY/JBG7pflO7AmdSUspif5EkkdxGCSGQAL4nnuGGLMQ=
Subject key identifier: 96:B4:F7:BD:EB:B5:88:1C:C3:FA:A4:22:C0:7D:90:6E:0F:6E:94:9A
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer: /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial: 019A4D0798F50F6B022BBB9E45EEDB6D8297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:02:14 +0000
Manifest this update: Tue 04 Nov 2025 04:02:14 +0000
Manifest next update: Wed 05 Nov 2025 04:02:14 +0000
Files and hashes: 1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: 65CYKvf8jO4TiijjvB/GtNYGHsvN0Ra0oRwh32ojXWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:98:f5:0f:6b:02:2b:bb:9e:45:ee:db:6d:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
Validity
Not Before: Nov 4 04:02:14 2025 GMT
Not After : Nov 5 04:02:14 2025 GMT
Subject: CN=96b4f7bdebb5881cc3faa422c07d906e0f6e949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:dd:94:70:5f:58:f4:4b:d5:2b:0a:2a:a1:
9f:5c:f4:ed:c4:88:8c:80:b3:a5:55:99:40:86:0f:
96:4c:d1:2d:0f:11:cd:e8:6b:7d:e2:ce:92:2f:25:
80:0a:a1:24:ba:29:67:66:09:8c:6f:57:a8:54:3f:
1a:a9:ec:8f:e6:19:19:22:53:57:bc:9f:2a:da:25:
60:06:70:6b:18:29:54:1b:9a:d3:77:0f:6a:18:4b:
76:9f:8c:02:0f:4b:05:1d:dd:d9:62:72:8f:a9:1c:
be:4a:d5:63:90:74:0f:cc:eb:ea:8a:2b:45:f1:82:
e6:47:69:1f:50:b6:dd:d7:a4:1a:2e:95:e3:03:45:
41:54:30:a8:1d:42:05:23:5a:11:17:3a:3b:94:f6:
c7:9b:8a:d9:50:79:e3:d1:cf:7f:e0:d9:bd:02:77:
60:d1:b8:a6:2e:13:54:92:4e:05:34:fc:08:f1:f5:
13:fe:d1:64:ef:fa:c5:32:db:74:93:49:96:b4:95:
1e:90:74:69:2a:88:08:96:6e:3f:c8:4c:58:29:09:
ea:90:6f:d3:55:6b:37:f3:f2:12:3b:4b:c8:da:5c:
ae:ef:c4:7c:00:75:0b:86:5a:57:4f:a6:2c:a3:39:
86:ed:3d:f8:fa:8e:f8:2a:47:46:d0:e9:60:79:5f:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B4:F7:BD:EB:B5:88:1C:C3:FA:A4:22:C0:7D:90:6E:0F:6E:94:9A
X509v3 Authority Key Identifier:
keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:36:16:8e:bb:07:b9:89:ef:2d:31:14:73:97:48:d8:0e:
6b:f6:0a:9c:24:47:44:73:e2:e1:75:76:e8:9a:d3:df:2b:ae:
d6:bd:76:84:ff:76:ac:fc:d8:d6:8f:79:99:38:00:90:92:92:
11:f4:d2:3e:77:00:19:6f:8b:35:3f:6a:42:6e:ed:96:56:93:
af:ef:68:77:ec:68:45:9d:4f:e3:06:35:98:78:ad:54:e8:c7:
6a:30:7c:bd:8e:db:ce:6d:a8:50:35:68:3b:71:3b:09:21:b0:
95:3e:93:91:4a:c9:0a:90:16:ef:ad:f3:63:b3:aa:35:11:dc:
9d:db:36:8d:ad:d1:39:fc:38:c9:4a:46:c8:f9:e2:b2:17:eb:
dc:88:7b:c3:6c:59:5c:5d:72:6b:f8:51:33:d1:ff:a7:9d:e0:
97:a6:6e:43:d7:7b:96:68:39:7a:fc:5f:18:74:4a:7f:be:8c:
5e:e0:bf:ee:27:26:d7:6b:65:bd:69:44:31:8a:30:47:2d:4b:
e9:52:f7:1a:2c:be:16:91:e8:ea:53:b4:ec:5d:90:52:a9:d9:
c9:c4:07:24:36:ad:5a:c1:4d:df:82:28:d7:3a:54:c5:5a:8b:
bc:d5:f1:ae:ed:ea:93:3e:29:fc:1b:96:99:bf:cc:21:c2:5a:
b1:58:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:00 2025 by rpki-client