Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: ShE4oBSPzvQsfAaat5N+b8TsYSfQS5mkxDjLCxU4Coo=
Subject key identifier: 1E:07:11:59:90:38:E6:C2:5E:16:5C:1D:3E:A9:B3:47:CB:CD:C3:39
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 019A4F2B22510BF0DC6A1C24C8F2BA79DBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 03B3
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: bCvipXxoN/gGESy0tPmNFxzRzSKwDNwr231pn6YB+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:22:51:0b:f0:dc:6a:1c:24:c8:f2:ba:79:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=1e0711599038e6c25e165c1d3ea9b347cbcdc339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:83:85:ba:3e:be:a1:ee:75:ca:55:51:df:
80:2a:1b:c6:15:74:a1:2b:dc:dd:72:44:d7:7f:3e:
4d:42:20:09:ea:db:b7:5a:6b:16:53:96:c9:f5:68:
cb:3f:81:e3:0e:74:91:af:76:37:cc:cd:de:e9:6c:
31:98:40:38:fc:e9:7b:d1:f3:8f:d1:3b:b8:da:a4:
37:a1:c8:fa:a3:e2:3d:33:8c:a2:d0:8d:23:80:e1:
7c:5c:fc:5c:50:72:bb:e4:ca:84:84:34:4f:d8:44:
0b:04:6d:7d:7d:f4:58:ed:bc:a3:d5:70:b6:47:ad:
38:da:7b:d6:90:55:aa:82:34:bc:29:39:5e:73:ca:
ca:01:9e:94:03:35:5f:ff:2b:ff:ad:92:57:71:ea:
f4:f1:a2:d6:76:65:2e:14:31:05:55:00:c7:42:ed:
d1:3c:90:ac:b0:fe:d0:68:ec:39:7d:fb:b5:f9:39:
01:a3:69:88:b2:3f:ec:72:35:2b:c3:77:d1:65:65:
ed:9d:f8:9a:dd:0c:22:af:ed:f2:77:7c:03:6b:83:
46:84:f9:2b:f4:c4:70:2b:53:40:69:ae:0d:08:24:
d4:6b:14:e0:31:c2:08:69:dc:f8:eb:aa:28:83:ca:
98:a8:10:e9:b2:6c:6f:3a:35:9d:42:dc:29:6e:49:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:11:59:90:38:E6:C2:5E:16:5C:1D:3E:A9:B3:47:CB:CD:C3:39
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1d:39:9f:8a:72:d7:b8:51:13:2e:56:78:7b:79:b1:65:4d:
6f:da:9d:8a:1a:b5:30:49:66:45:d9:35:3a:33:a6:04:73:f4:
c2:f3:fa:1a:f2:78:46:72:df:20:92:cf:ac:61:ec:54:55:87:
b1:e1:80:45:3b:91:6c:12:68:ad:72:14:f7:1c:8b:42:4a:7f:
78:aa:5a:7e:52:51:d4:75:1f:f8:c0:a9:32:8c:f0:eb:f7:ec:
5b:26:cf:22:c5:40:16:12:18:a1:bd:2e:91:93:d2:39:38:1e:
96:1c:71:94:ae:03:44:1b:fd:1d:0a:0a:1c:72:cd:69:6e:ac:
33:74:ab:f7:d3:fc:cd:fe:01:38:b6:07:49:21:b2:61:22:dd:
79:1b:5a:3d:fd:1f:85:16:aa:fa:fe:ec:62:e0:b8:49:be:d5:
d9:ab:db:de:8a:f7:c1:58:48:b0:d9:33:32:79:cd:2f:1d:64:
f4:33:6c:cc:4b:82:95:cd:25:3a:34:97:7e:58:91:d2:e6:6d:
07:2c:f5:6b:3d:20:2a:47:24:60:43:97:7e:d4:02:c7:2c:43:
6e:e2:f2:f0:da:23:2e:e7:cf:7d:cf:76:ea:6e:65:1b:46:37:
1a:df:77:ed:21:10:ce:18:ae:c1:f2:5f:3f:a3:1a:90:90:c0:
44:01:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:44 2025 by rpki-client