Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
File: vdAX3W18v-gmYVTBrkNMTPi2ilc.mft (raw, json)
Hash identifier: naR9a9/65N+swtBf/DacaRFuZEEgyuNrPLhBRtFSGhY=
Subject key identifier: 81:58:1C:10:26:24:A3:44:C8:60:1D:A5:F4:08:CE:6E:4E:D8:4A:DF
Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Certificate serial: 019A71EE80923F9CDFFC029E5C1AB67DCF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
Manifest number: 03
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: vdAX3W18v-gmYVTBrkNMTPi2ilc.crl (hash: QluUxCGNaBIT7dw6AhMnoMp3cV3+wAcyAXhEmZr/IMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:80:92:3f:9c:df:fc:02:9e:5c:1a:b6:7d:cf:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=81581c102624a344c8601da5f408ce6e4ed84adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:b2:e0:d4:59:34:8e:12:47:02:51:75:ec:
37:99:bf:a9:ee:5e:74:58:66:1d:ef:c7:7d:53:90:
e9:f6:ce:b7:64:82:96:fe:4d:3b:86:0b:89:0e:f4:
ae:3c:95:05:a1:1a:83:17:93:bb:9b:0f:f9:0f:81:
54:c6:23:4c:0b:24:25:17:c7:57:eb:29:55:25:72:
34:09:98:0e:3b:d1:18:4b:6c:93:8d:a2:de:e4:2e:
a0:34:1c:ad:09:26:ca:eb:86:5a:65:88:69:e4:27:
2e:6e:09:93:11:5d:0b:61:12:fc:37:f9:b6:df:57:
ba:9d:21:fd:7b:71:4b:e7:15:66:63:1d:b4:2c:93:
3d:36:f0:31:12:69:5c:81:82:d1:53:a9:17:a8:2b:
fc:99:a4:b2:5d:c5:3e:f5:d7:84:e2:d9:91:24:ec:
9d:5c:c2:8b:4c:73:db:63:a7:10:94:8c:c0:6c:d7:
7d:4e:81:a7:51:2e:bb:a4:16:e5:a6:88:29:64:0f:
e9:dc:c0:6f:24:93:f3:a8:cc:f7:93:4e:f0:e9:1b:
a3:11:10:85:3d:a9:92:5b:f9:c6:2f:2a:73:37:bc:
68:59:93:e2:bb:ae:c6:c9:2e:41:1b:e0:57:8a:2f:
80:0f:63:64:5c:e7:ab:03:d2:2b:2e:92:e7:42:f4:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:1C:10:26:24:A3:44:C8:60:1D:A5:F4:08:CE:6E:4E:D8:4A:DF
X509v3 Authority Key Identifier:
keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2d:ff:1e:5d:fd:c8:d9:83:b7:ee:1c:80:4b:3c:70:ce:f6:
0d:c9:d8:64:92:4a:54:ad:b8:c5:ee:f5:b2:c6:dd:c2:56:71:
60:4f:6f:31:7d:7e:8e:6f:47:72:88:16:28:b4:17:5c:b1:ea:
83:01:80:9a:88:cc:0c:1f:be:25:bc:f4:a2:e4:50:52:58:ab:
f2:ff:1c:a4:20:f9:10:93:de:5a:d5:9a:d0:67:d3:8d:be:c9:
3b:04:75:1d:dc:5f:3e:d2:17:ee:db:20:63:9b:41:ab:bb:71:
8f:b8:48:cf:e7:c3:29:18:68:0f:3b:a1:8d:a6:0e:4a:ca:8c:
79:04:ba:d4:21:64:d1:dc:1c:43:93:a6:0a:dd:dc:16:dd:4d:
2d:9d:6b:7f:9a:8a:9d:74:78:52:08:98:f2:3e:08:21:41:f1:
ff:77:2f:6a:fd:43:66:b0:8e:c7:00:2c:61:02:97:99:67:14:
f7:12:ad:52:9f:3a:f2:89:9c:db:fc:c1:ed:be:4e:86:55:a1:
30:e5:0f:e5:af:2f:d1:af:e0:9c:2a:55:4c:39:6d:4f:a3:82:
98:76:3e:c1:02:c5:03:48:03:94:aa:9e:7e:8a:18:e6:4c:de:
19:c9:6f:0b:b4:00:fc:b6:78:61:81:38:15:0f:15:c3:a4:66:
4d:dc:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:50:38 2025 by rpki-client