
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File:                     VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier:          pc2s6DDzYV8z1nLKXWHs4Ax32DpXaZn9wPy94T8s3wk=
Subject key identifier:   7B:BC:5D:1B:08:90:49:01:51:40:1C:72:0D:1F:74:AD:54:13:77:55
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer:       /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial:       019A4EF4461AD22B9A6C2CC074F16B217CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number:          1235
Signing time:             Tue 04 Nov 2025 13:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:22 +0000
Files and hashes:         1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: BWwtwzy9t0A45aKIGGy2dRFEkjv9VAHwVZ7ZzMfY8SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:46:1a:d2:2b:9a:6c:2c:c0:74:f1:6b:21:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
        Validity
            Not Before: Nov  4 13:00:22 2025 GMT
            Not After : Nov  5 13:00:22 2025 GMT
        Subject: CN=7bbc5d1b0890490151401c720d1f74ad54137755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:d7:98:bc:7f:02:65:bf:57:38:9d:cb:ac:
                    3c:6d:7f:21:b4:fa:a1:fb:db:88:a9:dc:7b:8e:b4:
                    39:e1:d3:f2:1d:63:3f:3d:d9:cc:83:43:c8:ec:d5:
                    40:5e:7f:b7:2b:04:5f:8e:ac:78:8e:14:f8:2e:7d:
                    4a:2e:8e:bb:3e:c4:80:3c:4e:f5:bc:05:74:17:bc:
                    06:0e:60:f2:79:f5:38:2c:99:08:19:1e:ee:95:b3:
                    53:25:4b:b0:37:f5:50:6a:3d:9b:07:6d:33:0a:9c:
                    81:f5:22:36:80:54:28:2f:66:3e:ee:fd:11:10:75:
                    07:7a:ad:04:f7:91:59:de:14:5f:25:2d:85:8e:6d:
                    66:85:54:3d:6b:a5:64:4c:b7:e0:e6:9d:2d:0b:46:
                    9f:ee:65:d5:c2:20:cf:d5:e1:ea:f0:7a:56:26:a2:
                    be:96:7f:5e:b3:77:d8:79:e1:86:a6:78:5f:89:11:
                    b0:c6:66:c4:59:03:83:e6:5f:15:19:2f:3c:ec:cc:
                    23:14:b8:11:b8:17:b1:5c:82:02:68:bc:95:58:e7:
                    e6:af:3a:c6:7c:33:30:cf:2e:da:b7:df:87:e4:55:
                    26:32:35:f1:15:e3:15:91:6d:b4:e2:8e:bd:18:98:
                    b5:18:8c:1e:a0:9b:eb:71:ee:73:5f:23:9d:27:99:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:5D:1B:08:90:49:01:51:40:1C:72:0D:1F:74:AD:54:13:77:55
            X509v3 Authority Key Identifier:
                keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:51:df:78:c6:d0:69:d9:d2:eb:06:28:3f:2b:c0:29:14:
         de:07:0c:87:4a:49:93:e9:3a:79:7e:94:a8:6c:dd:60:18:9b:
         3e:ba:a4:ad:54:69:79:e9:71:dc:be:3d:b1:46:1b:8c:eb:04:
         1f:b6:01:28:a5:92:0f:c2:c9:0f:80:36:f7:2d:cc:cf:7b:8e:
         2e:3f:51:48:07:e0:c6:a4:37:ae:03:53:bc:79:4a:8c:19:ad:
         94:5e:be:24:6d:b7:68:ef:c5:4a:46:c9:72:d6:e9:06:30:9d:
         c6:2b:81:a6:ab:bd:35:7e:4e:bb:20:c6:0e:a1:94:2b:a0:f4:
         e5:50:ac:10:1a:9f:67:fb:24:0f:59:66:85:12:2e:c9:ba:a5:
         5e:8a:6c:11:f7:a6:07:0a:38:b7:ae:aa:9f:4a:6c:c7:e8:ce:
         75:0f:f2:85:a3:3c:9f:17:7b:12:5d:80:f2:62:a5:16:03:77:
         c2:17:76:5e:66:b9:71:cb:cb:4c:84:df:42:87:25:75:12:20:
         58:ba:77:be:c2:7a:af:d2:5c:18:03:c8:4b:73:a0:d5:6f:34:
         d2:98:b0:95:29:cd:e8:dd:11:d7:6d:9a:f0:17:fa:f3:19:c1:
         c7:06:59:5c:2a:b4:92:71:fe:f9:5e:0c:ba:e4:6a:a7:07:67:
         35:75:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:37:29 2025 by rpki-client