Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: 92U//GrAoJq28JWCb9ayuNYTIqLEhTuuasV0JKVhlh4=
Subject key identifier: 62:99:4A:F6:5A:F9:3C:62:5E:81:12:AF:F0:DB:89:C5:1E:AD:8B:E5
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019A4E4F50FFF4B2A48F4073CC79CAD7C0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0D61
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: l1OUoHKzbtXbxYha4k/4imVwlJYECr4I0M+Ky8HP3W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:50:ff:f4:b2:a4:8f:40:73:cc:79:ca:d7:c0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=62994af65af93c625e8112aff0db89c51ead8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:ee:43:b5:e0:b4:01:eb:45:07:de:35:f1:
0a:02:9e:3d:af:31:4e:c4:96:78:90:1a:67:e7:be:
b5:b2:bb:6e:76:d4:cf:f2:f5:60:a2:14:3a:a1:ba:
b3:da:b0:ac:1f:ef:b8:fb:a8:5f:84:e3:9a:f9:95:
54:7a:94:61:cc:f8:87:94:fc:0d:54:09:5d:be:2f:
6d:db:59:9c:bb:2f:7e:66:74:c7:93:2e:1d:71:15:
b8:4d:e0:3e:ae:e3:23:2d:82:99:ea:33:02:1d:68:
30:72:d4:f6:fe:03:03:ba:08:6a:5a:6b:e8:83:76:
f6:4a:8c:de:cf:36:2b:b5:cd:f4:a4:de:14:12:aa:
25:8c:c8:b3:f4:0b:a4:f9:31:ed:b7:b3:f7:ae:af:
da:1b:74:b9:01:b9:d6:b8:5d:75:2f:06:27:1a:29:
62:05:66:31:e2:b8:20:5b:17:66:42:fd:f0:cf:10:
bc:e3:14:e6:51:9f:22:f3:22:ad:da:07:06:ee:f0:
74:c8:33:cf:6c:af:c6:88:cf:52:a8:dc:5d:1c:02:
18:27:31:ca:63:43:8f:54:af:3e:8f:e1:88:ac:02:
49:dd:86:75:d2:0c:c3:bd:54:e9:b8:c2:26:97:93:
53:76:2a:a3:c3:5e:a5:a4:2b:1f:77:c6:b9:58:0f:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:4A:F6:5A:F9:3C:62:5E:81:12:AF:F0:DB:89:C5:1E:AD:8B:E5
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:0b:35:9f:fb:be:8c:77:18:3c:fd:1b:72:91:2f:e8:ad:
a4:2e:e9:75:22:ad:33:67:04:bb:de:29:78:ed:f7:c4:f2:25:
b4:9a:20:97:61:c2:78:fd:76:c6:9b:a1:8e:06:02:ac:6f:58:
90:bf:34:18:c8:64:21:be:25:2a:57:27:96:0b:e6:58:8f:ad:
d3:27:6c:1f:1d:e0:bf:5c:cf:e6:10:94:6c:35:86:19:66:e9:
f9:27:59:30:da:ad:48:f3:03:7e:d0:77:41:8a:76:21:f8:c0:
0e:70:fa:31:54:ee:1b:95:8a:db:5c:e5:36:8d:a5:b2:87:09:
40:6d:fb:e8:66:97:b3:58:2e:d9:10:df:d7:9c:8a:cd:65:70:
c6:ea:f7:54:27:36:99:b2:e3:e0:82:bc:94:75:e4:5c:7d:5c:
6c:a2:c5:7f:b8:7a:7f:63:c5:37:67:0d:29:1a:fc:5f:d2:20:
e8:36:ee:e3:cb:c2:2d:98:14:fd:87:b7:35:8a:b4:87:86:ad:
fd:2f:b4:62:43:71:da:83:ae:03:ca:52:d1:ae:0f:bd:e9:ac:
bd:ff:cd:df:3b:73:66:7c:88:ff:5f:32:28:6b:24:ce:d7:ca:
20:7d:ba:63:ea:43:83:9f:dc:a9:3e:e2:9e:b9:ed:24:42:60:
31:7b:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:50 2025 by rpki-client