Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: dNxh9X7d62eCIPl3OcjH1LpYXrrASJA+fbafKH2JVrw=
Subject key identifier: 1F:44:AA:26:F2:48:D7:41:E5:83:6F:C5:76:A7:27:10:C7:33:43:D8
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 019A4D7431A33395D8FA69B888CBE63AD7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0B82
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: KBu34JOOtoInFOKJBKfIsmX6qyLnAbi5dWWoQ6k3gVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:31:a3:33:95:d8:fa:69:b8:88:cb:e6:3a:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=1f44aa26f248d741e5836fc576a72710c73343d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:13:05:89:07:fc:bd:2e:38:1d:81:cf:b6:
ff:2d:9b:38:ad:9f:a6:89:d3:83:57:10:93:52:13:
d4:75:cd:91:ce:ce:6b:fc:2f:53:01:0a:c0:11:8a:
86:5c:0d:8e:8a:8c:93:32:94:9b:11:bb:67:d5:04:
8a:87:89:71:84:88:fd:ee:00:99:5a:85:51:73:42:
06:04:89:71:e1:3c:9c:c3:7e:4e:58:06:72:d9:b7:
8e:0e:c9:78:bb:a7:11:0a:3a:0e:72:56:09:49:91:
bd:26:e3:1b:6b:e4:90:8f:26:09:75:12:ed:e3:cd:
40:66:4a:53:2c:08:6d:22:69:3a:f1:40:33:db:0c:
14:c6:a2:bf:62:6a:06:b6:ba:72:4f:cd:a7:64:73:
f2:9f:62:c7:21:15:c2:ca:f5:31:cc:23:ef:eb:f4:
b3:4d:81:5d:09:74:a1:c1:f1:3c:cf:9a:be:35:95:
49:34:63:11:b4:09:bb:c5:24:95:08:5e:e0:c9:04:
60:4c:14:48:91:ca:6d:2e:3c:ab:8d:ce:fd:42:8c:
02:ea:69:fa:d7:30:15:97:49:96:9e:61:d5:5a:8d:
53:5a:3b:2f:64:a8:1c:8a:88:42:f3:74:f7:cf:78:
50:49:e6:f3:7f:11:e1:b1:00:f1:34:6d:26:eb:c7:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:AA:26:F2:48:D7:41:E5:83:6F:C5:76:A7:27:10:C7:33:43:D8
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:52:49:2f:cd:da:6b:9f:e4:d7:aa:31:f1:1a:a6:a1:86:
77:6c:8c:d1:6a:30:95:d2:10:90:b8:d0:15:8c:f0:d4:c3:64:
9c:ae:93:43:da:d3:a6:49:0a:6e:df:d2:72:bf:b6:cb:1c:8a:
4a:84:3d:c0:b9:11:4e:ee:e3:8c:9a:5b:b0:5e:61:b3:5f:7b:
1a:6b:1d:fe:04:76:c4:60:37:92:12:66:ff:99:95:d8:56:48:
7a:1c:8a:e5:ac:f1:5e:01:c2:07:44:d6:d9:0b:a1:42:5c:49:
40:0f:b9:dc:02:15:e2:97:9a:cd:ec:1b:97:8e:d8:97:b6:95:
bb:c9:77:6d:90:27:19:67:36:6e:62:11:86:83:65:29:d8:8d:
46:c8:4f:ca:dc:61:a0:b1:94:7e:e4:b0:fd:8f:12:b8:be:34:
10:18:37:e4:c9:a7:72:8f:89:55:ac:d7:8e:bb:bd:13:60:20:
b4:75:b6:c0:3d:44:22:c8:41:e2:a2:65:0c:c5:db:a0:a5:1d:
25:e9:bf:21:a9:95:2f:6a:fe:8d:62:2b:b2:96:66:ca:b5:ae:
52:2d:bd:f8:07:c5:f8:8f:af:75:5b:40:a0:61:dd:07:bd:ea:
10:30:1b:66:48:79:1d:87:c7:7a:29:86:b0:54:e4:52:f7:83:
be:df:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:24 2025 by rpki-client