Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
File: VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft (raw, json)
Hash identifier: kD16pcl0tHnZ5fiZc/k7PFQzeWNnfywjQriAg9fnS3k=
Subject key identifier: 26:EB:30:D8:35:58:6F:5C:BF:DB:D1:92:BC:37:F7:59:44:BB:78:F2
Authority key identifier: 54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
Certificate issuer: /CN=5476e09001c3186526190d1f35d2a5b99fcaa270
Certificate serial: 019A50E2C69EA0588C0F22B2FFD92A8ECD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:00:30 +0000
Manifest this update: Tue 04 Nov 2025 22:00:30 +0000
Manifest next update: Wed 05 Nov 2025 22:00:30 +0000
Files and hashes: 1: VHbgkAHDGGUmGQ0fNdKluZ_KonA.crl (hash: 0nbtQLRPHTPTG8eYBqAtFWrMoP4ljs7sKVOIcWEm9AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c6:9e:a0:58:8c:0f:22:b2:ff:d9:2a:8e:cd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476e09001c3186526190d1f35d2a5b99fcaa270
Validity
Not Before: Nov 4 22:00:30 2025 GMT
Not After : Nov 5 22:00:30 2025 GMT
Subject: CN=26eb30d835586f5cbfdbd192bc37f75944bb78f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:ac:78:39:59:25:e0:27:5b:c0:54:10:e0:
64:6b:57:56:7c:a1:4c:e2:b4:f2:c8:58:e9:1d:70:
3d:a9:56:3d:d5:d9:10:cb:29:0f:1b:27:db:d8:6d:
e6:5f:84:c7:9e:ac:d3:b8:71:9a:68:31:43:0a:db:
4f:7d:46:a2:96:ca:72:2a:bb:8c:75:5e:cf:e0:fb:
08:7b:98:3c:80:fe:bb:70:d1:54:fc:b2:d9:4f:9c:
47:f3:9a:84:e6:b6:85:27:39:8c:51:3b:50:57:6c:
e0:26:f2:f2:2c:ed:cd:03:c5:b6:2c:85:fd:11:70:
f7:1c:0b:fc:af:80:5c:73:e4:6d:b7:6b:54:bd:36:
af:e4:3e:7b:d4:c8:00:d0:26:3f:86:db:62:56:57:
a9:b8:a0:ab:62:a8:f1:1d:e9:2c:82:f1:8a:f4:12:
a3:6a:ba:fb:ba:a4:ea:d0:73:1e:c0:93:43:b5:1b:
d4:af:43:7e:d1:7b:50:5f:a0:96:37:b8:9b:62:21:
ae:df:2c:93:e7:f4:3a:d7:bd:7d:b5:9e:6a:95:93:
b3:ff:54:0f:1b:e8:0f:d4:ad:8f:78:80:c6:ef:2d:
95:2a:f6:ac:57:af:20:a7:ac:b2:e8:99:b7:da:6b:
15:30:f0:80:e6:e2:82:34:f5:48:05:49:e8:4f:4a:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:30:D8:35:58:6F:5C:BF:DB:D1:92:BC:37:F7:59:44:BB:78:F2
X509v3 Authority Key Identifier:
keyid:54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c6:47:f8:ed:2d:3c:0a:e0:1a:dc:da:37:ea:7a:36:60:51:
05:f6:50:68:37:ef:5c:2e:30:2b:93:2a:1b:86:46:52:69:43:
ee:53:5e:22:9a:48:45:ca:a7:97:b3:59:98:b1:ae:39:12:01:
b8:9d:69:f2:44:bb:31:19:5b:82:5e:87:4e:71:35:24:53:41:
e3:32:f4:23:a1:0b:16:89:ee:0e:ec:61:bc:2a:5b:40:3f:72:
bb:b8:69:96:e9:f0:f0:39:38:02:be:6d:76:12:5f:82:da:f4:
1e:9e:69:bb:80:21:45:32:ff:a4:ba:ff:76:7b:93:df:c2:7a:
a7:be:8f:63:0f:ff:b1:fb:69:9c:bc:71:96:42:b9:a5:ef:e1:
13:14:c7:84:ee:da:1a:e9:fb:3b:f7:d5:32:ee:52:e3:d8:5b:
b2:de:b7:a8:01:42:d0:94:9e:eb:aa:be:9a:06:ec:cf:ad:e5:
fd:56:d3:c2:0b:a6:65:90:40:58:0e:42:3f:9c:51:a9:48:6f:
3b:8a:76:bf:8d:58:bf:e7:7c:a9:04:0b:1a:d6:fc:d0:d7:4b:
be:3f:1d:ee:66:ea:31:a6:14:ae:fc:38:dd:a4:2c:e0:4f:f4:
a5:25:d4:6f:75:cd:14:02:03:65:37:34:a5:6e:68:03:dc:f5:
61:c4:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:17 2025 by rpki-client