Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: TQT9FGUhmQ4/JYmGNDrNZkcZSKDbr6TJuYWgRiAOvcw=
Subject key identifier: 2F:EE:F8:CD:40:34:34:11:7B:AE:63:34:8F:8E:EB:31:BD:DB:EE:B8
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 019A4D07780CDB93C4CEE932F0DB3DB697C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 091A
Signing time: Tue 04 Nov 2025 04:02:06 +0000
Manifest this update: Tue 04 Nov 2025 04:02:06 +0000
Manifest next update: Wed 05 Nov 2025 04:02:06 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: +SuPW/6dRbYnjQJL8bNvcGZX3QwGt4/NDwo8WolN3gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:78:0c:db:93:c4:ce:e9:32:f0:db:3d:b6:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Nov 4 04:02:06 2025 GMT
Not After : Nov 5 04:02:06 2025 GMT
Subject: CN=2feef8cd403434117bae63348f8eeb31bddbeeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:d5:5d:67:ef:c5:43:36:46:30:b2:8b:1f:
84:09:04:2a:45:f5:42:db:da:28:e9:46:04:a1:7d:
5d:7c:4f:65:6f:1c:16:ce:6f:ec:17:12:34:b6:5f:
30:e0:09:5f:a6:1f:38:31:6b:e9:07:67:21:a9:73:
91:11:ab:f9:25:b9:b6:51:35:3a:13:49:ea:33:da:
34:96:d3:32:35:0f:d7:fc:c8:d2:be:60:61:77:1a:
2c:c1:97:5e:35:e5:66:84:ee:2c:0e:91:78:03:90:
dd:d0:d4:f0:24:e6:94:46:2b:84:91:9b:47:64:20:
64:7a:46:c7:5f:c6:63:b0:df:b8:0b:f0:4b:1d:1e:
76:ea:0b:47:f3:be:e3:ae:ea:50:b9:6c:53:4e:29:
5c:b2:5f:1f:bb:04:f6:58:0f:86:23:64:c4:b5:cf:
4f:45:09:2c:8c:99:2f:f3:76:d4:81:cc:7a:55:5e:
70:ef:33:d0:19:1f:ab:e0:11:9a:4c:f6:3c:a1:44:
e5:65:9d:be:cf:78:6e:22:5b:7a:65:a6:2a:34:3b:
17:2c:d7:0b:31:a5:8c:8d:a3:2d:f8:58:de:cc:4a:
09:ed:c8:f6:5b:06:74:f2:49:a9:41:81:2f:02:5c:
25:10:3c:3b:1d:c2:15:a5:8d:74:3e:49:c9:53:f5:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:F8:CD:40:34:34:11:7B:AE:63:34:8F:8E:EB:31:BD:DB:EE:B8
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c9:70:d8:70:b4:78:d4:b6:ba:ae:62:23:25:61:47:ef:bc:
12:90:ef:00:d8:73:09:95:07:8d:cf:5f:5c:d0:d8:82:7f:a3:
1a:13:25:23:ef:7a:36:5f:a8:6a:3a:06:4b:a2:a1:2f:53:6a:
08:80:92:4e:ba:47:6f:5a:be:c2:81:af:40:14:9e:b7:e9:34:
98:c9:6c:06:f4:95:c0:db:22:f1:14:9d:f4:c5:c6:09:2c:8b:
c8:da:e3:83:65:91:5a:8d:e4:30:d3:1c:0d:71:48:f1:ee:56:
0f:fc:f3:09:57:5e:09:54:c3:41:3e:86:a3:13:98:3e:af:dc:
ae:f5:10:46:50:32:32:c8:88:6f:ec:1a:d2:ba:3c:bc:2a:a6:
e3:e0:c1:98:6b:28:32:da:cc:22:bc:96:9a:61:9a:5a:7c:e5:
f9:2b:84:9c:82:79:68:3d:41:d4:00:09:ee:64:e4:a5:01:71:
a9:4f:d5:c7:e5:6e:af:21:68:bc:56:58:95:0b:c7:5a:34:25:
3e:09:50:1b:0c:c3:c5:19:57:0e:f4:b5:d8:07:dd:6b:7e:f4:
2e:56:f5:a4:be:f5:bb:e8:96:91:f6:a3:3e:35:fe:ff:2c:3a:
67:5a:3a:21:57:8b:84:c2:1a:b2:a9:36:ac:f7:79:96:25:9d:
65:ab:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client