Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: WsprXYoBNf8hfAxF2Et8OpnwcIqOFeVI3hfgQv8g4IM=
Subject key identifier: A2:89:3B:B3:37:52:0F:8C:D7:B8:1B:13:28:FB:0A:77:B2:5F:75:7F
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 019A71B83357FDE8F9B0AF8655D1FCE27A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0EE6
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: iYmBoVq2daS7gyGvkC2fsB2aQ407Zm21utn5L0+uLGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:57:fd:e8:f9:b0:af:86:55:d1:fc:e2:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=a2893bb337520f8cd7b81b1328fb0a77b25f757f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:70:e9:ca:5a:6d:7e:d9:4e:04:cd:a2:6f:
4c:d8:6b:ae:e2:85:07:2b:e1:f2:1e:38:03:0c:78:
c3:f1:f2:28:a4:7f:cb:a0:78:6e:0e:b5:68:cf:7f:
a5:b2:6e:da:32:19:b3:66:45:6f:6a:d6:29:86:d5:
51:c9:20:fa:05:1e:18:66:52:f1:aa:16:b2:e5:49:
6d:25:00:46:d2:61:1f:ab:67:7b:75:f1:c4:ee:12:
ff:37:44:b2:7b:18:78:41:b7:3d:83:c6:9d:11:27:
15:49:f0:db:dd:eb:25:da:1a:dd:8c:84:68:1b:0b:
cf:4a:ed:e3:c5:0b:1f:fa:63:ca:32:f3:3c:52:aa:
b8:d4:65:d8:3c:63:20:13:2a:0f:b1:d2:a6:37:6e:
ba:c5:03:e5:14:1d:8d:4b:59:0c:bf:d1:24:8e:bd:
81:91:58:5d:31:f8:ae:63:87:06:eb:21:b2:fe:91:
7c:85:c1:ea:d9:8e:2a:2f:ce:90:b3:31:48:12:e8:
f0:a7:a3:8d:7f:0c:4d:dd:cd:6f:73:2b:a7:88:76:
4a:dc:17:0b:e3:72:fb:ee:7b:b3:e7:c9:33:81:77:
db:2d:2a:a1:2d:77:8a:cc:b4:52:fc:0b:a7:6a:06:
b6:d7:ea:14:08:1e:c4:de:76:03:34:d9:05:b4:7f:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:3B:B3:37:52:0F:8C:D7:B8:1B:13:28:FB:0A:77:B2:5F:75:7F
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4c:e5:56:b2:1e:7d:96:66:28:2f:34:65:42:33:cb:d0:cc:
d5:d8:1a:07:59:9a:7c:ad:c1:99:a4:0d:df:86:3a:ba:78:ab:
1c:cf:c0:83:a1:ad:02:14:b9:54:67:6a:8d:e2:78:73:97:78:
84:31:75:03:68:fa:29:17:2a:9a:90:1c:8f:83:25:6e:27:ad:
3c:b1:88:d7:11:43:9b:e0:eb:9a:75:96:49:09:bf:61:80:92:
b9:be:b6:18:f1:f8:44:7f:55:a3:27:07:5a:28:9d:09:79:84:
52:2a:94:72:3c:56:63:5f:77:ae:06:8a:f8:94:31:e3:c7:8e:
ff:e4:b5:90:0f:20:9f:db:17:b8:81:99:cd:1d:d3:98:ab:9c:
fc:b0:40:d1:b9:ca:6a:fd:47:2d:88:9d:a7:7c:ef:fe:42:e1:
b3:e6:72:b3:b7:58:b2:e8:3d:7c:c2:06:95:52:dc:8c:84:5f:
1f:81:8d:be:68:28:de:df:f0:07:da:e7:9d:19:64:2a:8b:c3:
13:0a:fa:6e:8b:fe:28:d0:34:2d:f3:7c:46:85:da:18:97:36:
59:02:e3:72:fc:12:1f:94:a5:97:fd:f3:6e:9f:3f:0b:6c:49:
79:c7:e3:a1:ab:f2:50:27:9d:6b:57:bd:6a:7a:55:50:a4:eb:
2c:e7:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:37 2025 by rpki-client