Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: UyZtCHurKtzWtQ9fxIPCobhdwgU6TB0CLF/wcULivuE=
Subject key identifier: EF:F6:26:C3:02:B3:F9:E3:26:1C:5C:CB:07:15:5D:E5:07:7B:F1:A9
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019A71B8004BC1B0285935EA187AA7AB470E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 13EF
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: BJC/kj+qXrgB0rkgZ5pD2SjL4JK55bWDMMpwizlQ08E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:00:4b:c1:b0:28:59:35:ea:18:7a:a7:ab:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=eff626c302b3f9e3261c5ccb07155de5077bf1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:71:5f:54:57:2a:70:8e:bf:f0:a0:50:61:
0b:b8:0f:32:f5:f1:9f:a1:db:92:82:07:a0:60:93:
f6:dd:88:a2:3a:dc:42:d8:2a:70:02:8a:32:76:d0:
86:04:02:64:f8:ca:2b:6a:d0:90:f3:04:74:4f:be:
f2:e8:30:de:4c:5d:b7:01:69:cf:44:4f:5b:19:e8:
d2:d5:9c:ff:c9:99:cf:2f:04:c6:24:7b:70:77:9d:
7b:8a:f3:63:e9:45:74:3e:5c:9f:f1:13:8b:02:de:
ae:00:b9:9c:29:4e:12:44:ec:e7:0a:80:e6:6d:71:
c7:0f:41:57:70:05:d6:97:4f:2b:a9:90:60:2f:cf:
dc:37:91:2a:22:97:6b:48:07:51:d6:3e:16:be:5d:
71:f6:fc:14:05:d6:66:b2:f7:4b:74:32:66:b7:a8:
71:4d:ae:63:b6:c8:5b:81:2d:7b:a3:b7:0c:e2:fe:
89:db:6b:03:ce:f1:65:37:d0:60:c1:0a:0d:58:77:
8d:f8:b3:2a:66:d7:5e:9f:f2:f5:18:79:c9:8b:98:
be:ab:c0:3b:9e:78:92:fc:aa:7b:3f:1f:d3:d8:d1:
72:e4:b8:e9:28:cc:78:b0:7a:e7:1b:8a:a7:a9:76:
b6:98:98:db:7b:c3:8b:86:33:d1:59:96:2f:73:66:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:26:C3:02:B3:F9:E3:26:1C:5C:CB:07:15:5D:E5:07:7B:F1:A9
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3d:c8:4a:de:42:62:bf:25:d5:b0:f0:0c:75:60:7a:16:50:
2f:d2:7a:02:f8:ab:44:3d:c7:02:a0:cb:20:fd:72:d4:d6:5b:
01:eb:e0:2e:c6:57:e6:b3:f0:14:8b:0b:9c:1b:26:96:27:fa:
da:04:1f:bc:9d:d7:cf:fc:07:7c:6f:2c:8b:c5:75:47:cd:9c:
24:1f:4f:fb:78:34:ad:f5:3a:d4:e2:29:c1:3b:fe:d5:b2:0e:
6e:eb:f5:fb:10:4b:d5:b4:89:7c:1a:2a:d9:c7:d0:20:f0:00:
a1:83:af:81:e7:cd:b1:b3:5b:aa:41:9b:d6:e8:49:00:f4:38:
25:30:73:35:be:70:b1:56:54:a1:b5:6b:75:74:3b:56:2a:0c:
60:da:93:18:73:8f:8a:e7:00:82:3d:63:38:1a:8e:f0:b2:b0:
a3:eb:d6:6f:e8:9f:ea:31:b6:cd:90:69:8b:e8:a9:81:03:fe:
b3:3a:0c:cd:c1:9e:35:ba:16:4f:fe:21:0e:00:42:10:62:ca:
fb:36:66:ca:cc:40:9b:aa:e0:9a:f8:f2:b5:19:3e:b3:06:6d:
9f:38:d4:64:b5:4b:3c:03:da:81:91:68:f9:0e:08:9b:3e:d8:
ea:ec:62:32:5d:0b:a8:fa:0e:ed:11:53:6c:53:c3:fa:e7:5a:
93:00:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client