Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
File: vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft (raw, json)
Hash identifier: +ASI7dg9SRgmjiEUe9Jxk908ISQKWuhai89tmme/eKg=
Subject key identifier: 5B:9A:E5:5E:42:96:B6:0E:E1:34:6A:B0:66:F3:86:DC:57:61:5F:7A
Authority key identifier: BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA
Certificate issuer: /CN=be3119f4d953e760221acffeed3a4d7827d0e7ca
Certificate serial: 019A71EEA347E0DFCC031BA4CDB0771B2C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
Manifest number: 39
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl (hash: PDFaL8VmLq3VmH0E/AOioiw0H3GNI86WlcFCI7kq3jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a3:47:e0:df:cc:03:1b:a4:cd:b0:77:1b:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3119f4d953e760221acffeed3a4d7827d0e7ca
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=5b9ae55e4296b60ee1346ab066f386dc57615f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:cc:c5:b9:e5:19:7e:e4:bf:fc:2c:d8:96:
58:8e:5e:f5:e8:70:6b:ba:ed:b3:74:3f:ee:9d:6d:
82:07:87:43:0a:11:64:db:12:75:30:ee:5b:61:1e:
0a:69:c7:95:09:3b:fb:62:74:28:e3:92:61:79:68:
ce:cf:5a:ae:c1:2a:7c:55:34:8e:f8:26:aa:19:a4:
95:7a:13:80:84:78:9b:7b:93:ec:28:6b:e5:f9:48:
a1:85:a8:27:a1:10:a8:f5:14:ba:11:ab:d4:49:47:
e8:4e:08:83:b9:2f:ca:b6:a7:29:44:ae:f5:73:20:
d1:cc:15:50:c2:7e:8e:a0:ae:0d:3c:55:a1:81:64:
33:91:45:90:61:02:33:08:99:9a:06:c7:38:02:0f:
a3:44:b2:34:a5:68:83:56:29:a5:e2:0c:8f:50:ab:
a4:c8:34:e0:68:e4:c9:58:61:d4:02:50:91:a9:22:
8f:34:cd:cb:fc:47:a7:ce:59:50:66:62:60:d1:9f:
7d:bd:85:61:ec:9e:a8:24:3c:ac:aa:6d:53:10:e6:
6e:44:52:e8:66:7d:1a:f8:ef:fa:42:54:b2:d3:2e:
25:a3:3f:0c:0c:69:94:d7:c2:0b:8d:bd:cb:78:70:
a2:0f:6e:28:a9:0e:cf:c3:42:31:57:e0:5b:bd:ed:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:E5:5E:42:96:B6:0E:E1:34:6A:B0:66:F3:86:DC:57:61:5F:7A
X509v3 Authority Key Identifier:
keyid:BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3d:7c:15:0f:25:67:14:b7:0d:af:b6:d7:d9:6b:e5:79:62:
aa:54:dd:83:a1:45:da:1a:9e:fd:fe:90:41:1e:32:ef:0c:ac:
cd:ec:34:ee:30:83:b3:17:2c:af:80:1c:a9:c3:17:97:4e:d4:
5a:be:c8:26:86:76:e7:14:b5:90:a8:71:e4:81:48:69:68:d1:
c7:ae:ee:04:67:13:61:d6:86:ed:ff:49:f0:8e:c5:0f:08:c8:
0c:a4:ab:ad:ff:5a:ed:1d:84:ae:12:a2:b8:79:52:88:e0:90:
df:33:09:54:41:1a:7e:72:ec:a6:cd:a2:a7:7a:fb:51:68:fb:
be:2a:33:f7:9a:15:44:98:cf:28:45:44:5b:d5:c7:d2:a7:ad:
24:84:b6:58:95:36:3d:58:32:26:e5:ab:30:ba:64:b4:52:ee:
c6:bc:ba:35:77:7f:15:4e:6d:a4:23:4c:3d:fa:86:7b:e2:81:
86:01:c7:9c:e6:0f:64:78:d0:82:3e:bd:92:31:bb:a6:ab:38:
78:4c:45:fd:d0:1a:a0:fc:e8:03:1c:d5:d9:66:bf:0e:35:57:
51:dc:be:22:a8:26:44:ff:de:2f:7f:21:89:32:d2:82:46:eb:
96:22:ae:d1:e7:6f:b5:61:d7:50:f5:92:4d:5a:72:34:9f:23:
2a:68:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:59 2025 by rpki-client