Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: rLirCFQJk+FBVWP8tk8YJW66vKlE1WXFmrJbfHALUK8=
Subject key identifier: BA:A1:7C:27:F2:04:6E:8C:58:BF:7C:32:2A:3C:A4:F0:F6:AD:88:E5
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019A4F994C522D516F363E1F3C0CF6AB1606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 1506
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: hIEiv8Lkmg002PeAk5/B2HwtD46XHhkKgIuQHjx7lRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:52:2d:51:6f:36:3e:1f:3c:0c:f6:ab:16:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=baa17c27f2046e8c58bf7c322a3ca4f0f6ad88e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:29:28:db:2c:a6:e5:c6:64:bf:d7:ff:7a:
16:34:ea:9d:50:e2:c5:82:66:c5:5b:28:8a:a1:8c:
02:58:84:b9:ac:da:af:60:f2:f9:e9:00:8e:12:1f:
06:7c:6c:e1:82:18:f7:19:9c:6d:c8:08:05:2c:97:
af:61:7d:51:d1:f2:17:ca:18:9d:40:64:d6:fd:20:
68:24:eb:eb:5b:79:6d:36:db:0b:a8:a4:da:d8:f7:
5f:c5:84:50:c0:18:c6:b2:18:cf:a4:c8:22:87:77:
7a:0c:02:ad:89:35:10:52:93:a4:91:40:10:0a:92:
78:69:e0:e9:a7:0f:2b:ff:2b:b0:6a:8c:64:c5:47:
ef:ff:be:90:7e:04:49:9a:d8:0a:a0:43:5b:36:bb:
f2:16:77:61:c4:4f:c2:2d:0d:52:4c:14:b9:2e:20:
2f:ba:9c:6d:60:03:57:b3:50:be:31:4a:31:40:ea:
ce:a2:0e:4f:f4:28:23:aa:4f:3a:71:6a:4d:c9:18:
7c:a8:2a:40:2b:e2:5f:4b:20:93:45:27:27:48:f0:
4c:9f:f7:29:be:c3:52:f3:68:0a:48:6c:3a:5b:77:
bf:64:a5:5d:53:8d:13:9b:2c:bb:aa:a3:44:39:60:
7e:c6:1c:9a:be:01:57:db:41:88:dc:b5:11:49:5d:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:7C:27:F2:04:6E:8C:58:BF:7C:32:2A:3C:A4:F0:F6:AD:88:E5
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:49:c0:4f:29:3c:11:e9:ac:2e:4f:83:9d:67:b0:ca:ac:
ac:cd:41:e5:8e:cb:4d:84:65:ec:ea:32:90:c1:04:14:0c:0e:
c8:44:cb:a0:80:26:20:d5:84:84:d7:93:7b:1a:f0:87:fb:22:
a9:8c:14:4b:1a:9b:c5:40:aa:35:7c:e1:75:9e:ad:a9:72:53:
3b:34:5a:16:f6:5e:69:bb:dd:6b:2d:e5:bd:6b:0e:f4:76:ad:
56:20:f0:d3:0a:84:01:3e:ec:4a:83:d7:1a:b4:94:e5:17:be:
ea:f3:16:9a:3f:ae:45:f0:a9:f9:f5:0f:5e:6f:90:1d:86:0c:
bd:51:c0:aa:b4:fc:79:40:ac:2b:6c:4a:12:e3:d5:92:6a:49:
6e:85:9a:9f:1c:99:f5:97:25:8d:cf:23:91:d8:c5:79:ab:b2:
61:57:6b:ee:18:83:d5:fb:6e:0f:42:83:c8:53:57:57:3e:3c:
30:1a:86:b9:79:62:fc:41:32:af:c8:59:d5:c5:5c:2d:8e:90:
b1:df:e5:93:d2:bc:c1:65:1b:0e:91:03:ee:52:d7:2f:33:7f:
23:8a:c4:b1:1d:b1:a9:4e:0f:98:99:69:35:bb:4e:2e:99:19:
3e:3c:31:fc:5c:f6:bb:e9:32:7a:be:e4:74:88:07:ca:9e:15:
d5:f7:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:56:24 2025 by rpki-client