Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
File: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft (raw, json)
Hash identifier: +Sdwkl+SbSWqHS9FIHJIGwtwppeEW4B7hGhF55moqog=
Subject key identifier: 55:B5:75:12:07:B6:01:41:B9:CD:BA:4E:5F:27:02:36:49:2F:FB:92
Authority key identifier: 57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4
Certificate issuer: /CN=57c4a93b49f30ba76099bbda562d47b920487bf4
Certificate serial: 019A7149A0B6DF085E07587691CE7BEFC054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
Manifest number: A2
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl (hash: Dy5KQm4lYkI68tauxldr/7VD2lB/fG+8zjpZUMPx/F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a0:b6:df:08:5e:07:58:76:91:ce:7b:ef:c0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c4a93b49f30ba76099bbda562d47b920487bf4
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=55b5751207b60141b9cdba4e5f270236492ffb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:95:6f:ee:76:eb:08:69:3d:78:41:20:b5:
fb:5e:cd:39:84:46:34:81:25:8d:0a:4a:e9:61:2f:
8d:1a:ad:97:27:87:be:07:2a:b8:de:b9:c4:e4:3d:
53:80:b8:46:a1:e2:ff:8c:04:b5:30:12:0a:ed:f0:
65:1c:7a:93:91:a5:b0:10:3c:0b:8a:c1:29:27:bd:
46:4c:6b:90:95:8d:d8:ad:4f:59:46:b0:8a:9b:0f:
5b:09:d3:b9:9f:7f:bb:1d:a9:23:a8:4b:12:c0:e3:
f6:4a:77:19:cb:d3:d9:ad:c6:2f:31:98:fe:40:51:
af:da:86:12:0e:83:38:a0:e1:6c:67:95:de:52:a8:
cf:c4:b9:7e:12:44:f2:2b:15:29:f2:14:c8:d8:f8:
81:86:93:44:4c:fc:b7:b4:c8:79:4a:04:20:49:10:
70:70:29:6a:55:7b:c6:25:28:85:d5:51:a0:e0:4b:
01:7e:d4:75:61:0f:c5:e8:f4:5a:59:c3:12:d6:3d:
e4:25:06:70:b1:02:e4:88:57:41:d4:c4:87:37:0b:
6d:37:64:52:7e:bc:44:7c:0c:50:a9:38:8b:63:c2:
83:cf:99:d6:22:56:22:ad:ef:fa:e6:69:8c:a9:64:
93:4b:73:be:5d:d9:f6:b8:03:6a:02:50:5f:e9:38:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:75:12:07:B6:01:41:B9:CD:BA:4E:5F:27:02:36:49:2F:FB:92
X509v3 Authority Key Identifier:
keyid:57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:31:e0:3f:83:87:00:62:f8:f7:61:4e:7d:39:9d:62:e1:21:
8c:e5:87:aa:b7:d4:04:15:3e:b5:4c:76:57:4c:d1:c8:44:30:
63:f1:4a:0e:0f:34:11:60:c4:cd:bd:a9:ad:6b:1a:07:53:f6:
bc:88:dd:7f:b3:96:a4:1c:83:c1:a0:0f:fb:3a:00:d3:fe:93:
81:46:10:0d:c2:f2:c3:c1:f3:ba:d4:66:25:d2:67:11:e6:53:
b8:9c:1a:a8:58:59:f8:03:e1:f8:d5:d1:90:49:70:db:0b:dc:
49:53:b7:59:e3:e6:cb:ab:ec:fb:43:b8:75:f5:e0:c7:cc:1d:
f3:a9:c7:14:95:fb:14:ee:21:51:94:35:4c:8c:5b:b8:4b:ad:
7e:e6:77:45:50:b2:1b:33:a1:d5:96:aa:f3:a5:a4:54:19:25:
d1:e4:9a:83:7a:6c:03:55:f0:1a:6e:07:d3:7f:ca:a1:9b:43:
81:7d:04:03:34:f2:0b:c5:06:86:cb:b9:e7:00:c6:bd:37:06:
02:0e:4a:94:03:ac:09:e5:53:88:de:e1:0c:bb:01:17:de:d8:
e5:1c:07:a5:24:ce:8f:c0:d5:8e:5f:90:3a:99:e3:4a:51:5b:
c0:34:3c:b6:43:64:68:84:5d:8d:d5:59:06:3c:0a:33:5c:b6:
8f:e1:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:43 2025 by rpki-client