Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: U5yeX6MPNJ8l+7ZofbRSBoBCJcJiaD5wCQpN6GYK5aE=
Subject key identifier: 19:F7:8C:2C:72:60:17:53:30:A0:2D:3C:B7:F4:8D:D6:72:DC:29:25
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 019A71B79700E0DBF48702D99BF30F8C5186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0D0B
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: 4kjE+djHXCMxpg6/EMYu/9pGAyhkCfN5kgtVF1jYVso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:97:00:e0:db:f4:87:02:d9:9b:f3:0f:8c:51:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=19f78c2c7260175330a02d3cb7f48dd672dc2925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:56:48:f1:f7:33:b6:20:c9:e9:c4:98:f7:
61:0c:f9:4d:57:11:37:13:b4:e2:87:88:02:f4:76:
97:b9:4b:ee:a0:5d:7e:03:6a:95:8c:ab:19:e7:65:
e1:c4:84:ef:79:9c:26:9c:31:83:b4:0f:40:f2:37:
bf:70:93:15:c0:44:53:f2:2f:85:fe:5d:20:dd:2c:
97:4c:fa:f2:61:5a:e0:57:5e:8e:8f:9f:47:fd:18:
90:07:83:54:b0:c0:09:fe:4f:e8:40:96:d3:4d:19:
61:83:6f:2e:f9:ac:61:15:04:5d:66:ce:48:e4:cf:
20:a7:3f:61:b8:34:30:fb:66:99:40:ba:d2:98:c6:
9e:c9:5d:16:23:e2:e9:91:46:0d:73:e2:a3:18:80:
b2:bc:54:a1:14:94:93:8e:e2:ad:74:6a:e9:33:dd:
a8:71:be:6a:27:d0:ff:1d:6c:7e:8e:dc:f8:cb:88:
40:a8:93:8b:75:fc:ed:ef:25:05:d3:e1:86:a8:5e:
6b:8d:26:af:23:ee:e3:31:51:50:53:ac:d4:a0:4a:
60:d5:d6:bc:81:56:05:01:24:e0:6f:6e:f5:0d:29:
40:8e:7a:fe:06:61:f9:ae:66:f3:29:e9:ad:39:9e:
66:18:4b:98:59:ad:3a:27:30:1e:c1:70:62:f6:4b:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:8C:2C:72:60:17:53:30:A0:2D:3C:B7:F4:8D:D6:72:DC:29:25
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:22:23:58:3f:4f:1d:98:85:b6:ed:79:3a:ef:5e:1d:af:
76:00:b3:a0:e1:d9:80:41:74:98:a2:17:08:28:0d:3d:57:8c:
fc:9a:be:38:21:f9:3b:d9:f3:f5:61:00:3f:79:54:df:13:17:
e4:f5:e8:ab:30:49:9a:30:e6:61:aa:dc:58:57:75:78:01:0f:
3d:6b:14:f6:5f:03:9d:57:12:16:6b:b1:8e:01:c0:1f:a9:89:
81:0b:a6:c3:6d:30:15:38:d2:48:36:c3:46:f0:c9:91:be:bd:
c9:19:14:af:11:77:da:28:47:a7:37:d9:ee:bb:6a:d2:75:b9:
66:71:a8:dd:f9:1f:00:dd:40:a9:7b:ba:cf:80:44:94:66:0c:
de:d2:d7:ec:65:cb:6c:d7:7f:fc:2a:55:f6:0d:81:da:91:8f:
68:90:15:99:7e:a2:a9:76:2a:3c:de:0e:d9:13:9d:f6:14:43:
c2:48:c9:fc:71:57:31:9a:f8:4b:d5:7e:b3:71:c1:2e:a0:aa:
83:e8:f7:97:75:3f:e5:e9:98:89:85:96:4f:d4:2a:e6:27:eb:
ef:1c:13:d9:8d:73:4c:4b:3b:64:e0:fe:06:5d:49:26:cc:63:
a4:ad:b2:04:65:b6:85:c3:99:c5:5e:10:f9:1b:e7:ce:71:80:
c3:2f:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client