Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier: kwLDPH1m5DuOY0i0ZG7XryYULsxgtgS7Td6P3ymts6c=
Subject key identifier: C2:89:AC:B3:EC:27:67:94:93:AA:2E:60:E1:E3:4E:14:44:71:D6:8B
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial: 019A4D07E49B96F6D97ABBFA7C5A9B13223C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number: 0850
Signing time: Tue 04 Nov 2025 04:02:34 +0000
Manifest this update: Tue 04 Nov 2025 04:02:34 +0000
Manifest next update: Wed 05 Nov 2025 04:02:34 +0000
Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: oOxOFjyO13nVHEEx9ETsJIivMmSAYcxgf8tlaR4BzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:e4:9b:96:f6:d9:7a:bb:fa:7c:5a:9b:13:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
Validity
Not Before: Nov 4 04:02:34 2025 GMT
Not After : Nov 5 04:02:34 2025 GMT
Subject: CN=c289acb3ec27679493aa2e60e1e34e144471d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:99:e2:7a:14:bc:1e:12:45:66:d3:44:16:
44:b2:11:26:25:d3:ba:a2:2e:fe:e7:a0:79:e3:6e:
61:eb:e5:d1:bd:a2:74:79:25:63:86:92:d0:0e:44:
58:a9:3a:87:04:c0:cd:49:fa:93:7c:b5:52:76:50:
b6:15:66:f0:1e:68:bd:18:a9:aa:07:7b:2f:a0:11:
68:17:db:9c:f2:75:54:28:c8:fc:4c:dc:1d:94:d2:
da:ad:ea:2b:85:ca:05:a9:3b:52:5b:b1:0f:4d:aa:
19:b2:71:ae:47:3b:81:00:3b:11:da:7d:94:0f:92:
95:0a:b4:23:9f:39:9e:ad:6a:b3:12:77:7e:27:9b:
82:5b:37:4e:87:88:bc:89:ff:4a:8b:75:ce:80:1e:
9e:95:e1:c9:0b:bb:ee:5d:68:0f:96:b5:46:89:c5:
c8:b5:4d:94:c5:07:71:9b:ff:16:58:db:13:34:f1:
61:e2:0a:3c:33:e8:5f:fe:db:f6:3b:dc:ef:bd:09:
2b:8b:30:b6:72:8a:12:6d:75:1a:12:0d:ee:d8:1d:
bd:b8:6b:f2:56:a9:54:20:84:76:69:84:12:73:c2:
01:da:c9:8b:c9:1b:aa:8d:93:8e:71:53:3a:1f:56:
5e:4b:5f:e6:d4:89:ce:d9:59:9c:26:94:47:f9:3b:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:AC:B3:EC:27:67:94:93:AA:2E:60:E1:E3:4E:14:44:71:D6:8B
X509v3 Authority Key Identifier:
keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:04:b5:a5:bf:63:b9:99:4b:89:d2:4b:c9:f3:db:c3:85:9d:
74:f4:53:b2:89:14:35:51:cd:63:2e:0b:fc:18:dd:15:73:12:
5c:56:ad:a0:3d:34:14:d3:18:25:75:e1:c8:10:ae:15:33:d4:
43:bb:ce:8c:23:c4:85:f0:ae:c5:0d:3b:e1:b4:b2:33:1c:f4:
be:03:36:67:f3:29:70:22:08:87:e5:1f:8d:46:bb:df:42:f4:
16:6e:bd:f6:71:f7:81:02:12:2a:a0:76:94:a1:e0:b0:da:65:
6e:13:d6:12:85:de:ea:eb:05:6b:ad:48:24:fa:11:05:ec:8d:
f1:da:fe:02:5c:7f:fb:8b:a3:ef:ca:c7:dc:ab:29:8d:9d:43:
e8:cc:90:c7:af:b8:84:9f:9f:9b:d2:29:1d:14:0e:fe:db:a1:
64:e9:e0:8e:a6:4f:2c:cc:8e:6f:86:ca:91:07:9a:75:08:d6:
6f:4a:33:45:bf:42:8f:e2:11:a0:2b:11:c8:ca:6f:ed:88:a3:
d0:05:eb:af:f3:f3:34:dc:a1:77:fa:9e:e5:50:a5:24:15:10:
8f:04:96:f3:34:d4:5f:73:08:c8:53:e9:86:d2:dd:8e:68:86:
48:c4:3c:df:ec:cd:b0:d0:68:b7:29:63:1d:9e:72:91:31:ce:
cd:c1:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:00 2025 by rpki-client