
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier: 7G+UBglBR6TBJog/wkGFv7ZOnYRNaZ6UShzilrE+67M=
Subject key identifier: 88:7F:E7:34:9C:D3:81:8D:DD:51:69:79:FA:AC:9E:D0:90:23:D8:C2
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial: 019A533EB84FDF1897EAB4D948DC93125AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number: 0763
Signing time: Wed 05 Nov 2025 09:00:10 +0000
Manifest this update: Wed 05 Nov 2025 09:00:10 +0000
Manifest next update: Thu 06 Nov 2025 09:00:10 +0000
Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: YcrJI26elEP0h5I/N9VpogGtyO+XcMTj9IMtvHvvL2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:b8:4f:df:18:97:ea:b4:d9:48:dc:93:12:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
Validity
Not Before: Nov 5 09:00:10 2025 GMT
Not After : Nov 6 09:00:10 2025 GMT
Subject: CN=887fe7349cd3818ddd516979faac9ed09023d8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:b2:37:5b:b0:e7:c1:81:f2:47:bd:9f:e8:
93:1b:72:e0:55:f6:f1:f9:3e:de:b0:16:4d:8f:58:
1d:b1:76:97:ae:5c:c8:39:7d:23:87:a2:66:9a:02:
05:34:2e:d2:e6:76:98:5e:0e:d2:5c:48:42:49:c3:
54:13:3d:20:4e:62:47:23:35:c8:3f:1c:f1:5e:fd:
40:0c:24:b4:0f:92:40:08:28:da:91:72:a9:f7:a1:
c5:a4:1c:45:1f:ba:69:3e:09:fd:69:f5:0b:dd:ec:
0d:d0:12:fd:6b:6f:26:ab:59:53:79:60:7e:b6:37:
5c:bf:b2:6f:c9:eb:bb:6d:99:76:28:b8:42:a5:7b:
25:77:34:62:31:e6:7c:ce:db:83:a3:f7:f1:b5:49:
1e:69:a9:92:88:1d:88:27:eb:c3:be:f9:1d:1e:e6:
da:87:de:3c:87:4c:18:c0:22:f0:17:78:af:f4:8f:
aa:d2:89:54:b4:5a:d7:96:9d:70:3d:11:ae:46:a9:
75:02:c6:ee:8c:95:73:e5:af:10:47:44:c1:fc:44:
25:7b:63:06:be:5d:c1:60:b3:76:9e:cb:27:48:dc:
ea:43:3b:cd:f1:ce:d5:9b:00:ca:68:ed:ef:36:15:
25:89:12:d8:9e:14:ca:f7:3c:9d:a2:3f:5d:61:a5:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:E7:34:9C:D3:81:8D:DD:51:69:79:FA:AC:9E:D0:90:23:D8:C2
X509v3 Authority Key Identifier:
keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:38:37:5c:ff:2b:d6:66:de:f6:d5:f5:6f:98:7c:13:96:10:
ff:b2:ff:55:85:b9:25:ae:61:3d:5b:0a:d4:61:1e:bb:d5:51:
bb:7a:1a:ea:cb:ff:f3:89:42:19:8a:96:20:0d:65:ec:1d:bd:
5e:31:d3:d1:b0:58:75:04:6e:19:7f:bf:b1:0b:2d:49:84:d6:
8c:63:fb:aa:13:4b:ef:7f:97:c7:ff:83:b3:90:58:dd:49:d2:
fe:7f:ba:cd:1a:5d:37:f0:36:8d:5a:49:21:0e:d5:5d:a0:6a:
e4:e0:85:90:9b:9a:e1:2c:f0:f3:dd:86:4b:63:bd:fa:b0:6f:
9d:fd:f2:81:c7:75:92:75:00:98:d5:54:d8:29:2e:ae:c4:16:
ba:47:e2:55:6e:d4:b3:fa:c2:54:46:25:8d:04:bc:25:88:6f:
fb:e7:fe:ae:1d:d9:79:09:13:bf:ef:98:ee:aa:32:cd:36:61:
7f:e2:93:1d:4b:71:6f:a8:4a:2b:9c:76:dc:fb:30:1a:78:3b:
85:31:bb:5f:11:65:fa:98:f8:43:7d:af:49:37:31:4d:e1:5e:
4f:94:86:ea:a0:ab:58:e2:fd:1b:8d:4f:81:16:ec:f6:c3:9b:
1a:03:38:c5:2a:6f:7a:92:cd:ab:ea:0d:35:95:15:a3:3c:4b:
16:b5:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:45 2025 by rpki-client