Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: XxXXPx+fT8/ZmjozKrvz50wQ1baaVKadZiwunkkNRiA=
Subject key identifier: E5:73:8C:0F:55:99:A4:C6:46:78:E3:3E:E8:AE:C7:ED:40:1B:89:66
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019A71B8CB59792FC58D2B15DCCC42CDC5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1299
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: hr+hvyKvOHmdUOu4sL83PpsbMfhdVsDKQ9oW6eQx/dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cb:59:79:2f:c5:8d:2b:15:dc:cc:42:cd:c5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=e5738c0f5599a4c64678e33ee8aec7ed401b8966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:ae:9a:a0:2d:13:17:14:bb:65:a1:0f:30:
23:55:cf:e8:20:dc:ea:fc:37:b5:c3:d7:0b:11:02:
2a:22:e3:26:10:95:49:17:aa:00:44:09:8d:e7:20:
62:db:6e:ee:f4:ec:52:47:4d:5b:09:08:cc:f4:12:
ba:ac:d2:cd:65:2e:fc:b5:76:e2:9b:2d:b5:13:db:
52:d9:09:4f:b0:0b:17:9a:20:04:4f:75:5a:58:fb:
22:3b:29:c9:30:6e:6e:93:4c:6c:19:a1:d2:b0:ae:
5c:04:85:a7:f5:8b:3a:11:41:23:b6:44:4a:3b:c8:
ff:e7:05:c8:bf:9f:dc:e2:11:7a:61:a7:1a:31:3e:
2c:5b:4a:48:eb:63:f4:c0:33:fd:05:f0:46:9c:98:
76:09:0d:47:48:23:7a:cb:78:33:71:d1:c3:96:35:
8c:d9:b7:40:7a:1f:e3:a4:77:d2:be:60:71:25:a0:
fe:02:ed:9b:30:6c:f3:35:e1:91:99:fd:3c:2c:f0:
8c:3b:d2:02:16:c2:c1:bd:61:3f:6d:57:d0:06:82:
44:ac:a4:6c:3c:45:87:fa:f9:0a:2e:c0:73:3f:90:
bb:4c:b4:ca:da:8c:28:af:05:54:27:a5:57:12:13:
c2:bc:0b:33:f1:1e:97:23:f6:4c:8d:0a:49:31:ee:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:73:8C:0F:55:99:A4:C6:46:78:E3:3E:E8:AE:C7:ED:40:1B:89:66
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:80:ef:4c:77:52:99:90:24:5c:e9:1c:d6:2d:c3:5f:b2:
ee:47:30:76:98:12:1b:20:f8:71:ae:ce:af:89:ee:dd:49:ea:
84:f2:a2:08:8a:e1:4f:25:07:8e:69:93:97:7a:1c:a8:ca:39:
cf:d3:17:9e:89:bc:b9:cf:23:a7:1a:00:84:4c:ad:c8:a3:f4:
02:51:5f:f4:ae:15:7c:10:46:ec:d9:f3:3d:8a:3d:9c:d9:bb:
03:87:b8:24:ec:a8:bf:4e:53:27:b9:c4:f3:68:75:da:51:b5:
32:6f:d0:31:a3:f8:d3:4f:86:b2:41:c5:08:4b:a2:8f:17:20:
cd:1f:98:3d:56:1d:5c:70:b6:ea:29:12:9d:f3:b1:9b:78:46:
32:8e:4d:78:04:b7:64:0f:8e:09:96:f3:18:94:01:4e:77:ed:
2c:a6:15:e0:73:b5:3d:85:42:3b:6b:27:2a:b5:ac:ca:64:ec:
9b:4d:31:f8:8d:9d:32:57:78:34:49:14:f2:4d:94:67:f6:c5:
c0:76:7c:16:5b:9d:2f:0d:9b:c0:74:51:f8:fc:89:43:6e:fc:
6f:2d:4d:86:aa:73:d8:18:78:11:13:a8:7a:a0:9c:a5:44:ab:
0f:01:9d:69:e5:9a:47:df:be:48:aa:10:85:79:4c:33:91:ba:
11:3c:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client