Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: SYktcCw/UPDphHpodmiT/zd34KqxMHVmgnDLVH406YI=
Subject key identifier: 49:15:EA:F4:15:FB:C8:0B:26:E0:10:F7:46:04:AF:05:70:97:CD:2F
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019A4EF5E9C3573CA0B9768F28D2B4E05378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: xK+HDGDVxMpaGUl/SRU6OLzM39DmVyku7oYpamVQJPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e9:c3:57:3c:a0:b9:76:8f:28:d2:b4:e0:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=4915eaf415fbc80b26e010f74604af057097cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:95:f5:b8:90:9e:0d:ac:58:15:d2:7d:c2:
ef:e7:b4:0d:0e:52:93:63:ac:f0:2f:4f:96:6c:79:
42:0d:6f:c0:68:6a:3c:40:81:03:4d:b6:38:10:30:
af:33:8a:b5:2d:2e:54:06:cf:3b:85:e6:95:30:b7:
8d:ac:86:bb:d7:a6:74:0f:8c:2a:9f:5d:98:cf:7b:
40:a5:f2:6f:81:d9:5a:4f:52:5d:74:4c:b8:93:b6:
dd:d7:13:70:08:7b:59:59:34:17:9b:71:3c:5b:8d:
65:58:0d:d2:1c:0c:dc:42:a1:51:5e:f6:cf:8f:2f:
8a:8d:d9:e4:07:d6:a8:44:c9:b2:e2:db:65:a0:dd:
90:53:d6:50:b0:b3:e0:b2:73:bd:e5:85:e5:fe:9c:
30:fd:eb:47:41:38:59:b4:3c:06:1f:a3:b4:52:a4:
96:0d:2c:c4:da:c0:fa:5c:63:84:25:d4:5d:b5:fa:
da:72:7b:62:07:34:80:f9:d4:15:94:cb:dc:6b:5f:
7d:30:99:ed:d5:25:b2:10:94:45:25:03:0b:88:a9:
2e:75:be:21:08:fc:e0:e2:28:61:d9:6a:f2:6b:77:
42:52:74:12:17:5c:77:7b:77:16:2a:d7:11:87:1b:
7d:c0:79:f9:0d:47:0a:17:b6:95:e0:5e:ae:2d:55:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:EA:F4:15:FB:C8:0B:26:E0:10:F7:46:04:AF:05:70:97:CD:2F
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:22:46:a5:7d:31:9e:c4:ff:19:55:46:16:4d:31:bc:0f:
aa:83:62:8d:14:ee:f6:e4:1e:21:60:e2:c6:2f:7f:7a:4f:d7:
35:2f:f2:2b:83:d0:e4:f5:50:8a:19:3f:74:7c:fb:d1:ba:69:
6e:0a:b6:05:f0:ec:c0:d2:2d:01:9b:e0:12:ef:b2:c7:f8:3a:
d3:cd:a2:91:01:9f:0f:a9:20:3e:31:4f:11:b4:93:03:82:3f:
47:06:1c:4d:c3:d7:f0:6f:11:ef:c1:2a:cc:ee:31:63:a9:a9:
1e:39:09:e9:17:cc:e2:84:5b:80:0d:be:2e:b0:ff:10:be:f6:
a6:f8:74:8f:c8:4c:80:ad:a0:65:2f:fd:50:55:f1:f7:f3:8e:
0b:69:20:67:03:23:28:b0:6a:3f:36:0f:96:aa:81:5f:10:76:
15:24:3e:3c:2c:21:3a:f7:f4:6d:b1:b8:7f:be:b2:08:1b:b8:
4b:ed:0f:45:c8:34:df:ef:86:68:46:8d:30:a0:bb:ee:a1:39:
09:32:47:a4:f0:f7:95:b2:66:3f:95:27:e3:72:0a:7a:a1:80:
05:df:e7:3f:aa:ab:f8:85:f6:9d:27:11:44:bc:49:a6:c2:58:
cf:24:db:98:5c:a3:55:bd:0c:ac:e6:5b:6f:0b:f7:eb:c2:81:
e0:19:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:08 2025 by rpki-client