Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json)
Hash identifier: MCMRIC6WroogLlSlSr0Ar/oVzZ6ag+hcKzd48xUsDTk=
Subject key identifier: 15:7A:50:9F:77:ED:8D:15:E6:08:73:2E:26:9B:3A:BF:5C:BC:9F:A6
Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Certificate serial: 019A4DAAB77848906F809262D0B4AD01AA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
Manifest number: 086E
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: ieTd3dRVqSAjsjbqfbH+yaZyuWWo4sTF6mt3O23fGLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:78:48:90:6f:80:92:62:d0:b4:ad:01:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=157a509f77ed8d15e608732e269b3abf5cbc9fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:b7:6d:91:9e:32:a2:41:bd:38:af:42:3c:
b3:ac:fe:b2:d5:dc:ef:6b:33:ae:82:a9:d7:05:90:
36:92:1b:d6:ff:eb:fc:2d:f9:6b:7e:7f:e5:4f:31:
e5:c8:ba:e4:d8:c1:89:a8:f5:99:f0:7e:f8:b5:8e:
c5:f9:2d:f2:45:8a:4b:bc:2c:bb:8c:6a:b5:01:68:
88:2b:a7:98:94:bb:1d:40:95:af:2a:d1:67:52:23:
90:0c:48:eb:dc:ca:56:ff:3e:0f:b2:ff:cb:9f:17:
c0:fb:53:c2:b5:c5:f1:47:e1:27:1d:2e:24:59:18:
27:69:54:95:35:a1:37:a9:83:44:3a:be:59:2d:36:
48:24:13:70:65:3b:01:01:14:76:63:b0:12:8d:37:
dc:1d:ca:04:39:24:9a:e3:93:bc:c3:52:09:67:a2:
95:c6:6c:01:13:16:9c:e1:73:a4:cc:2d:bd:5b:d9:
34:9d:65:82:0f:74:97:9b:6b:b3:51:b1:f1:47:e5:
1d:b3:5c:01:91:30:98:11:77:24:f4:7e:33:0c:70:
44:df:78:32:0d:63:d9:63:08:2d:32:4c:ff:63:3e:
eb:e5:2a:98:33:83:df:30:31:8a:f8:54:03:84:6d:
61:70:cb:7d:ec:24:af:fd:ff:a9:3e:d3:d2:a2:ab:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:50:9F:77:ED:8D:15:E6:08:73:2E:26:9B:3A:BF:5C:BC:9F:A6
X509v3 Authority Key Identifier:
keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:a2:c6:4e:85:01:99:7f:81:fb:48:b3:d3:3e:64:d8:6f:
39:cd:b4:b1:8a:81:83:24:ff:f0:d1:f5:8c:08:ff:64:0a:51:
ba:94:d1:f8:a3:ec:cc:be:94:c9:ec:fa:ef:ba:b1:fe:66:e2:
24:4a:83:ab:cd:19:f0:79:0e:4e:93:fb:f5:2c:da:d8:3a:35:
37:f3:f7:f8:c1:49:e2:ac:1a:15:59:fa:5d:4e:e4:34:20:7b:
2f:2e:19:12:20:e3:74:ba:76:da:0f:79:56:21:c7:40:81:ef:
a3:dd:55:25:f3:81:c1:2c:d9:a8:8c:8e:ee:64:7f:67:2d:13:
42:ee:62:38:cb:b3:6c:7a:8d:b7:a6:e7:bb:ab:0f:97:89:09:
59:49:da:bf:93:4d:b6:ad:50:27:77:4e:67:fa:1d:88:65:ef:
c7:e9:b3:a3:92:89:c9:a2:bd:6f:60:9a:0d:76:e1:46:7f:1f:
2d:a7:7b:36:99:6a:07:a7:72:fc:19:91:f5:4f:ee:84:4d:e8:
57:e4:d2:b9:72:80:58:ee:d6:3f:24:9f:fa:87:eb:27:f2:b0:
a4:56:ba:af:4b:2f:8e:21:21:db:05:8a:47:8a:6c:97:e1:17:
d4:4b:47:11:ad:db:48:0b:fa:5c:40:52:85:6f:e2:52:c0:c1:
91:a3:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:15 2025 by rpki-client