Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: HCQMZ1oa7tcL+QaRmvSy2GvjId7Fpeh/ZYg7sdr56Xs=
Subject key identifier: 9F:07:66:8C:7E:10:56:EB:0B:E3:ED:18:2D:62:BD:A0:73:F2:26:D9
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 019A4EF53763056A1192C48CC14C29CCED3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 09FC
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: FMiNc2yFmIXA+/svCY2oiVh5nJ3qcjzZHT7BqzrYkfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:37:63:05:6a:11:92:c4:8c:c1:4c:29:cc:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=9f07668c7e1056eb0be3ed182d62bda073f226d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:4d:9f:23:09:22:78:ac:e0:24:53:3b:23:
49:96:31:01:bc:2e:9d:18:9c:ab:5f:24:71:c5:81:
6e:9c:9c:1b:3e:af:93:5c:b3:1b:66:8e:3a:f2:44:
15:ca:43:48:53:8a:67:e9:eb:27:4f:9d:fc:f4:01:
2e:7e:fc:12:b9:55:ec:f3:f9:04:81:d7:1a:97:10:
2b:1e:d4:94:c7:2e:d2:d3:eb:f4:3c:24:a3:5f:da:
8b:1f:f1:dc:a3:3c:91:b9:70:1e:83:49:7c:81:5a:
0f:e5:bf:44:37:2b:3d:fb:c5:18:ea:db:8f:e6:dd:
da:45:3e:f5:27:82:25:91:84:3e:d8:63:c6:03:e9:
d0:74:52:80:37:a0:8d:47:05:f6:1a:55:46:54:75:
ab:92:b3:eb:f3:91:bc:19:8d:fb:cb:18:94:5d:cf:
15:c1:50:2a:d0:3d:a0:91:6d:ef:c7:85:dd:22:40:
f0:df:f4:d2:63:fb:da:52:8f:31:b1:a6:ba:2d:4e:
d4:bd:d3:7e:e2:ad:84:b4:a8:c7:5c:ab:65:66:a9:
8a:54:cc:f9:a7:87:50:4e:ff:d8:eb:9c:06:8c:49:
13:5c:ce:c5:83:89:66:7d:45:56:58:35:2c:10:e6:
33:36:b1:10:86:8b:29:ad:1f:cf:13:32:f6:7f:14:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:66:8C:7E:10:56:EB:0B:E3:ED:18:2D:62:BD:A0:73:F2:26:D9
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:eb:c7:2c:73:05:db:7f:41:b6:1c:aa:85:29:04:29:7a:
ec:18:d0:16:16:ff:c8:7c:1c:6f:d4:04:76:3d:bb:37:16:dd:
79:cd:8c:2e:f9:87:b0:66:2d:96:76:61:19:f2:86:71:55:f3:
f9:8d:59:f2:13:73:55:7f:13:45:c9:c1:e8:6f:59:dc:2f:e8:
f7:a4:71:1e:d5:cb:ac:c4:b5:6e:cd:96:da:d2:a5:5f:e3:aa:
71:f2:48:c0:53:25:36:ab:d6:28:cf:98:48:62:25:50:62:dc:
f4:02:22:8b:02:7b:c6:3e:66:35:51:80:fa:3a:51:52:88:6a:
08:4c:c6:1e:a4:7b:a5:b9:e6:e1:e7:03:32:bc:55:bb:33:76:
db:51:46:49:7f:2f:79:47:fc:df:ac:8f:e4:97:55:c7:b1:65:
03:4b:b0:1b:9b:30:23:b3:b7:43:60:39:08:a9:fc:c5:48:bf:
33:6d:d2:b9:be:51:cf:23:86:de:ca:42:4a:1f:51:e9:2e:17:
16:ee:80:c4:cb:51:35:00:07:85:37:b1:d3:67:8e:a7:35:46:
f1:d9:43:ab:10:3b:87:d5:29:f0:c5:60:02:53:0b:78:ac:9d:
99:85:db:7e:0a:56:45:90:5a:6d:41:99:25:fd:7f:4d:cf:af:
4e:0b:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:20 2025 by rpki-client