Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File: rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier: aLnKYWUzjhDGOwdfCzLnwWGTQK0tr0wMd2SN1EWQ6Gg=
Subject key identifier: D1:C7:53:72:8C:7D:08:FC:C3:63:4E:F9:8C:32:4B:95:6D:0E:57:49
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer: /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial: 019A4EF57072193DF9528C2ABA94F67FE242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number: 1033
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: jCMtaGWlIeQaslyk6J/ub1u8jK+YK6xbgAJDRoekKUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:70:72:19:3d:f9:52:8c:2a:ba:94:f6:7f:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=d1c753728c7d08fcc3634ef98c324b956d0e5749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:44:01:ec:50:e5:66:b9:0b:0d:b2:e3:ba:
21:f7:21:01:3b:ca:30:de:40:ba:0f:33:9c:96:fa:
e4:b9:da:91:4e:9a:93:a4:aa:37:28:30:70:f1:51:
c9:64:59:95:08:bf:46:42:37:cd:ac:fa:a1:45:ff:
07:9e:6f:fe:f1:81:1c:62:3d:39:4b:f3:c9:2e:e7:
eb:2c:ca:e1:24:94:b1:10:ec:db:39:41:8b:09:48:
65:9e:3e:8f:09:e9:fe:7d:9c:cb:a6:94:2e:99:d0:
2a:9b:14:45:fc:6f:bc:ab:26:b4:42:2d:08:ba:72:
b0:d4:9c:3f:c4:10:bc:92:65:2a:56:b0:13:7a:3c:
d0:de:1e:ee:4e:ea:8e:4d:07:07:4f:52:fd:db:f6:
e8:20:d8:6c:ab:2d:77:0d:41:0c:3d:28:03:cc:34:
54:3a:2c:81:8f:06:43:4b:33:96:f3:76:ad:3f:5c:
42:a9:e3:14:27:22:ef:39:32:07:f0:f6:6a:82:60:
c9:70:e2:75:e4:9d:ee:c8:a3:3e:60:0f:04:91:52:
b6:ba:39:ca:04:ac:5a:a0:4f:7e:be:0c:9c:d0:18:
39:6a:80:fe:6a:b5:4a:42:3b:f3:70:a2:43:b7:42:
58:f7:bd:fe:aa:e4:90:47:04:aa:7d:df:e6:25:3a:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:53:72:8C:7D:08:FC:C3:63:4E:F9:8C:32:4B:95:6D:0E:57:49
X509v3 Authority Key Identifier:
keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:09:2f:37:5a:ce:00:d7:f2:cf:f9:97:f6:0b:2a:ce:5b:
68:8a:92:e5:ac:de:2f:f3:95:45:26:f3:6e:4e:fe:ad:5a:f2:
84:ee:c9:be:39:51:ca:29:b9:da:f7:99:55:3a:7e:07:4c:a3:
b5:11:56:a8:05:59:6d:e2:10:a6:0a:8d:ed:6c:ee:44:ab:c2:
1b:74:32:1c:93:13:fa:05:f4:dc:31:66:32:bb:a1:57:04:da:
08:9c:78:b6:21:5a:9c:cc:97:73:3e:2d:f9:c3:75:16:bb:36:
11:b4:7a:41:6c:5c:bf:29:cd:b0:4e:78:3b:3a:01:db:c0:c8:
56:4e:de:e2:c4:f2:00:6b:54:95:1c:b3:db:2b:95:d8:11:09:
98:9e:45:1a:9f:8e:52:1d:f4:61:27:03:ca:86:56:14:df:7d:
f7:e1:47:cc:ff:65:65:e6:14:f5:3e:52:bc:4e:a8:18:1a:9e:
29:42:e7:49:f2:31:b5:80:c5:eb:04:e1:58:c4:7b:04:f5:e8:
1f:93:62:33:3b:db:44:53:e9:80:7c:17:0c:ca:f4:10:54:70:
1c:1e:80:6b:ee:90:81:cd:9b:85:02:db:f4:c5:4e:5b:77:98:
13:45:dc:fa:66:20:b9:8a:a8:97:88:4b:f1:20:51:84:fa:18:
a4:3f:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:34 2025 by rpki-client