Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
File: V-L2mlyy1YBNIamwRboxSusaqh8.mft (raw, json)
Hash identifier: 4ATgFHcliOmUKzoVhzQHQOGj4LRXAm/l1jj9taYnC5U=
Subject key identifier: E3:56:AC:87:36:9F:E2:F4:CC:2F:B6:37:4A:EF:05:AF:4F:53:7E:CF
Authority key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Certificate issuer: /CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Certificate serial: 019A7226364E09BC2CB214A691E548FD7EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: V-L2mlyy1YBNIamwRboxSusaqh8.crl (hash: YByMoN0wCuDIxZyL9MvLCLpy7ONO9ZY7F4zCvnhlJ9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:36:4e:09:bc:2c:b2:14:a6:91:e5:48:fd:7e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=e356ac87369fe2f4cc2fb6374aef05af4f537ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:ce:2a:57:d8:f5:a6:4e:1d:63:db:48:66:
9e:a1:a6:3a:a9:e0:37:40:20:14:26:5b:24:99:ea:
30:fe:e3:0c:28:73:0a:1f:40:8b:be:eb:6b:db:45:
e0:fd:b5:c6:dd:42:fc:64:eb:30:c8:ee:a5:b0:2a:
f2:6a:02:cd:72:e5:15:cd:56:37:83:b3:79:81:c6:
f9:65:89:8c:12:6c:fa:bc:cb:8e:e6:a0:af:e2:cd:
6a:18:81:20:b6:0e:bd:7a:bd:7c:58:53:fe:8f:e3:
85:40:1f:e1:3d:f1:84:7f:6c:07:27:d4:a8:59:58:
a3:a5:21:a7:ef:0e:fe:91:b7:05:0d:27:7e:26:4d:
7f:0a:15:a4:3d:0a:ad:89:bc:ed:1a:2f:21:c2:e5:
9e:c4:e4:ba:6b:f8:a3:48:4d:56:94:f7:27:64:a5:
b0:72:6b:fc:e1:66:1d:55:81:ef:de:81:69:a6:6b:
b2:94:58:b2:19:2d:23:61:f3:77:e7:42:00:b9:9a:
3c:c7:d3:cf:34:fb:66:84:9a:5e:a7:de:9d:4a:f3:
98:ee:2e:31:73:40:1d:1c:63:8c:7a:70:7c:78:22:
88:12:64:48:cc:1d:e5:f1:fc:9f:06:51:68:80:8a:
b8:90:26:70:6c:45:f6:ce:c4:dd:98:87:c7:7f:69:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:AC:87:36:9F:E2:F4:CC:2F:B6:37:4A:EF:05:AF:4F:53:7E:CF
X509v3 Authority Key Identifier:
keyid:57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:ca:c1:00:9f:a2:c9:7f:58:32:72:9c:79:12:4e:02:36:
28:e8:64:9a:09:9c:cf:32:15:15:c2:f6:53:2c:72:d6:69:d0:
24:37:a8:d5:95:85:ad:6c:54:ea:43:74:2d:67:ed:5a:c0:6a:
2b:6b:fe:c2:cc:0e:9a:8e:1e:a6:e1:11:15:7b:be:76:93:29:
d0:d2:16:f5:75:92:57:a0:62:d0:5e:a8:04:60:44:5b:2e:12:
a0:ed:a3:bf:6c:52:00:44:3a:13:36:07:21:c6:6b:e2:2f:7e:
82:46:58:9b:58:af:2e:a0:e3:bd:a6:6d:27:bf:61:dd:3d:72:
19:45:70:ae:bd:e8:8b:9f:a8:74:94:39:6c:59:18:4c:cd:4b:
03:ca:43:f0:25:18:1b:2e:83:5e:96:48:95:50:ab:7b:ce:b4:
8e:20:61:ab:ba:65:4e:29:a8:55:77:68:a2:a9:66:de:fc:58:
b8:ee:35:76:d8:19:07:0c:4d:3e:cf:c7:65:a4:c3:2d:4f:56:
4e:fb:bd:43:cf:d3:9c:8a:07:af:2b:3d:1e:56:25:18:72:ac:
4d:09:17:d2:e4:50:0f:02:fd:42:2b:8c:37:85:d9:9a:d7:e7:
6e:0f:7e:d4:48:35:d8:ea:58:bd:db:24:f0:63:92:31:cc:d0:
a8:4c:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:54 2025 by rpki-client