Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier: ZqrYhm6qii8YjcCKMSdSulLfpQtcDjRFhIqZjHFVUyE=
Subject key identifier: 04:87:C6:ED:84:0D:EA:B6:65:45:7D:56:B2:3D:58:04:4C:97:1F:8F
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial: 019A70A51D2C40516A5753176E5A5C20AAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number: 1116
Signing time: Tue 11 Nov 2025 02:01:00 +0000
Manifest this update: Tue 11 Nov 2025 02:01:00 +0000
Manifest next update: Wed 12 Nov 2025 02:01:00 +0000
Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: CbpdA8VaKbhL1uid0xHuJF7FDia48JmleBHQjL6tfw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1d:2c:40:51:6a:57:53:17:6e:5a:5c:20:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Validity
Not Before: Nov 11 02:01:00 2025 GMT
Not After : Nov 12 02:01:00 2025 GMT
Subject: CN=0487c6ed840deab665457d56b23d58044c971f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:00:9e:25:81:85:43:6c:fa:44:ab:ad:4b:
88:17:7f:e3:c3:9c:5b:25:30:57:c7:7c:72:a0:a3:
81:31:6b:0a:60:c2:76:8c:87:40:cd:20:14:c6:3e:
fc:c0:43:6e:e7:4a:69:36:64:3a:fd:ba:02:9d:cc:
57:4f:57:1c:20:f6:66:0c:09:48:f3:22:e5:7c:a4:
dd:f6:b8:75:73:a3:c3:ab:23:1a:b2:fa:39:1b:0d:
7b:a7:f2:64:59:bf:9d:e0:e2:cb:09:ee:e9:a2:c1:
47:2d:c4:aa:ba:a8:48:26:f4:65:72:7f:dc:0d:8f:
24:9a:d9:34:fa:1d:e8:fb:1c:ad:91:34:5e:61:71:
17:39:4b:0f:ad:7d:52:56:99:13:9e:da:8a:c7:72:
32:4c:d7:68:0f:d7:91:6a:f7:9f:41:cd:b5:a7:82:
82:98:55:bd:6c:e6:8b:46:6c:7a:fe:0f:f8:6f:8e:
5a:7b:f3:02:9e:85:a0:e6:c6:10:b1:56:dd:e3:8b:
4c:fd:db:fc:6e:97:34:b0:7a:67:aa:ff:70:0a:28:
db:3a:04:fa:af:d5:e8:eb:56:a5:c3:a9:10:8d:55:
4e:77:4c:6c:11:b4:05:4c:83:16:e5:16:5d:f1:0d:
be:97:fe:2d:85:80:e1:2d:2d:83:49:19:1e:09:7c:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:C6:ED:84:0D:EA:B6:65:45:7D:56:B2:3D:58:04:4C:97:1F:8F
X509v3 Authority Key Identifier:
keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:1c:44:28:66:e6:a5:13:29:14:c1:81:10:0a:a6:a7:45:
58:0b:86:ca:96:23:19:a0:b8:41:58:2d:3c:cd:3d:55:0d:f6:
bd:05:2c:92:f4:8d:a6:8f:9b:a5:ad:61:58:34:54:de:35:dd:
9e:e4:2a:91:64:2a:12:f5:13:86:59:d5:c5:cc:a6:42:20:56:
f3:a0:7a:bd:d6:db:ea:8d:b7:24:92:34:5d:31:8f:c8:28:ef:
52:4c:e4:e6:55:8e:e4:0a:78:d0:27:a9:a5:15:e9:e7:e1:60:
9f:b8:fe:3f:26:5f:7f:19:d4:47:7f:db:08:41:81:49:55:30:
bd:28:a9:5e:b4:59:69:a4:49:fa:a7:2f:ae:4c:f3:11:52:b3:
4f:94:a4:2a:98:c4:63:c9:65:16:b8:07:50:a9:fd:c5:af:25:
7a:77:0f:c2:20:fb:02:94:c6:cb:68:d8:43:7f:38:25:dd:19:
b4:73:81:70:80:8c:24:66:1b:6d:ab:d2:1b:f0:a7:0b:6c:36:
9d:36:12:fd:4f:04:8c:f7:17:53:48:f7:df:23:19:3c:71:44:
00:6a:39:42:1f:7b:0d:3c:88:61:bf:cf:29:5f:59:14:e7:69:
da:e5:d8:f4:13:93:31:37:55:69:5e:00:a0:e9:bb:03:aa:23:
0f:c0:05:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client