Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier: wK7WgR7y5GftlhnJL9J9wDZsbKLDGcb126GZJLwuBVI=
Subject key identifier: 25:3A:AB:87:60:DC:CA:49:2C:9A:B6:AD:C7:0E:9E:80:27:61:48:F8
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial: 019A729360DF9EFF824AA9889B9CB4975142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number: 0731
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: bzq68FHBAFLmTQjA4TFmjzaYGmDmjX6J9grmucpNbc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:60:df:9e:ff:82:4a:a9:88:9b:9c:b4:97:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=253aab8760dcca492c9ab6adc70e9e80276148f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:7b:2f:8c:b9:a4:ef:bb:17:69:e4:df:a0:
09:1d:a2:55:f6:2a:81:7b:e3:67:74:d1:39:df:e3:
03:46:83:70:22:13:2f:3a:f6:9b:31:0f:e0:7d:38:
86:7e:93:a6:32:20:12:ba:f2:76:08:a3:f7:77:a8:
e9:92:8c:a8:2f:2e:18:90:51:69:dd:3a:44:b2:94:
f6:00:a2:09:35:b1:65:9d:16:9d:ee:a3:b3:4a:c2:
46:03:21:aa:f3:1f:fd:b3:f9:b1:ee:b0:53:ec:18:
bf:94:d0:c6:f9:06:51:56:09:2b:75:41:6d:c4:6d:
38:43:2f:52:72:4e:45:b9:d5:2c:ab:ce:ac:dd:7f:
89:a8:30:4c:81:04:de:ef:b8:f4:90:db:cd:6c:6b:
8c:17:fb:9b:07:9c:27:4d:d5:ff:f9:d2:cf:ea:a9:
b6:ee:e7:53:4e:41:df:49:f1:4e:1b:9f:fd:46:84:
32:7f:d1:bc:ce:de:fc:da:f3:4e:3f:a7:c5:26:4e:
7c:a9:34:05:41:34:c0:70:8b:f0:5d:4e:69:2a:d3:
09:9d:82:94:3d:c7:a3:dd:e4:fb:a3:fe:f0:88:5d:
65:86:b5:49:8b:dd:82:e3:3c:37:99:70:ce:53:5e:
de:e0:59:d2:99:02:82:78:f3:43:4b:89:17:ff:b1:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:AB:87:60:DC:CA:49:2C:9A:B6:AD:C7:0E:9E:80:27:61:48:F8
X509v3 Authority Key Identifier:
keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:7f:d1:68:27:af:29:53:0c:37:c7:2b:37:68:f9:78:c0:
44:a6:b5:cd:b0:06:9f:9a:58:93:3b:95:d5:44:3c:35:88:ea:
c3:c5:f0:51:8b:ad:1f:b6:e7:c4:3f:33:cb:68:32:13:40:c5:
c3:7f:ad:25:47:3a:f6:19:99:6b:c4:03:86:79:7c:e5:7b:cc:
aa:98:d4:85:8e:57:7d:43:04:97:8f:94:c4:20:3b:bd:55:8f:
7e:0e:f8:eb:d2:de:24:a3:d8:8e:5d:92:ad:8e:d7:51:e8:bd:
25:4c:5d:c4:f6:f9:40:74:35:98:de:a3:73:a9:a5:1b:14:23:
37:bc:b2:54:84:02:f0:b8:92:94:77:06:06:c9:38:ed:7e:4b:
3e:f1:73:ab:86:38:22:98:d7:46:28:ff:9d:fb:26:8f:6d:11:
c9:f3:2f:51:f0:b8:8e:89:1c:ff:38:cd:6a:95:8a:ec:de:77:
55:35:09:c9:cc:55:3f:7a:3a:00:02:25:d7:41:80:57:4b:8f:
b6:02:86:43:ca:59:82:f9:b5:65:62:54:8b:90:5f:55:d4:40:
50:c0:65:28:85:53:04:92:05:2c:a3:4c:c0:41:75:6e:09:73:
65:fc:53:dc:ad:3c:2b:be:39:03:4b:fb:09:e0:6e:2a:4f:12:
4c:8f:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:12 2025 by rpki-client