Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
File: vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft (raw, json)
Hash identifier: jAj1+zNhtgF1hZTsGC5ylGTAS+T2guJ7gPVFINblUWQ=
Subject key identifier: CF:14:F4:6E:7B:9B:62:57:FF:9C:A1:77:3E:63:CB:81:33:6C:C0:7B
Authority key identifier: BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
Certificate issuer: /CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Certificate serial: 019A7112BDE56423C22F49D9A4BBD2B391F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
Manifest number: 01AA
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl (hash: MutLN8aqvFgGbFWoduXQkbR56aVerVLeAgInEJBaaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:e5:64:23:c2:2f:49:d9:a4:bb:d2:b3:91:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=cf14f46e7b9b6257ff9ca1773e63cb81336cc07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:38:9f:b2:bd:b7:2d:1e:0d:ae:3f:c3:fb:
7a:7f:67:43:38:86:d3:86:76:8d:b5:9f:c5:76:2f:
31:da:3d:d8:d7:40:74:1b:0a:77:66:16:4d:24:dd:
3d:ea:4f:6e:40:dd:ae:ee:21:cd:2b:40:20:6d:93:
aa:d3:05:23:d4:c4:87:fd:2c:96:3c:a5:fa:cf:f3:
ff:1f:4d:f1:96:e3:35:41:47:cc:1e:39:93:7c:88:
1d:6e:f2:6d:09:fe:dd:60:4d:e4:d6:1d:3b:47:1a:
66:6e:08:33:7a:94:ef:c5:a2:e0:f6:49:20:db:b7:
74:36:cf:93:e8:c2:3e:26:8b:d6:70:8a:aa:8f:84:
1c:f2:13:ec:ae:a4:76:25:e2:4e:9c:bf:21:03:28:
ce:14:2e:2a:2f:34:3c:98:f4:18:4e:0b:51:83:40:
bd:90:8d:00:e2:80:ab:2d:0d:a0:e5:68:f2:3a:2e:
28:13:f9:82:75:4e:92:f0:eb:18:31:a9:2b:60:ec:
f3:33:de:4b:5d:e3:53:0b:19:ba:c2:3b:30:0c:70:
76:27:3f:28:3a:4e:de:cb:7a:7a:d7:ef:54:ef:72:
27:59:d6:5d:42:83:d8:6f:61:74:dc:60:10:c3:90:
76:ed:ba:6b:95:9b:18:06:d7:f5:b1:0f:da:0a:e8:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:F4:6E:7B:9B:62:57:FF:9C:A1:77:3E:63:CB:81:33:6C:C0:7B
X509v3 Authority Key Identifier:
keyid:BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:10:f0:26:4e:9f:4f:00:b6:36:c1:50:2c:f4:c8:58:fb:74:
bf:81:47:14:f4:78:69:4c:1a:47:1b:3c:4b:4f:d5:1b:de:76:
83:73:8a:fc:a0:3f:4a:29:66:ea:ba:78:1f:03:7a:b3:8b:e8:
e7:69:ec:77:17:91:63:ca:e6:32:f1:9e:1e:92:10:6a:30:af:
05:bc:6d:64:c5:cc:a4:32:54:9a:be:c6:16:1c:01:4a:20:ea:
69:7b:66:f4:7f:bf:36:b3:cf:1b:52:80:87:6c:40:c0:39:fc:
bc:66:a2:bb:43:85:d1:6e:08:8a:56:49:f0:30:4f:d5:d9:1a:
95:f7:4e:f5:09:70:2f:80:11:fa:6b:ad:c1:da:69:71:91:7b:
2c:20:91:ef:04:bc:76:33:97:0e:81:b1:18:2f:4c:12:00:ed:
43:2d:a4:17:95:b7:10:de:3f:12:ec:23:e8:ee:49:8f:3e:c6:
e2:ba:ba:f2:a5:b6:bb:f0:6f:2d:52:47:94:15:0c:90:46:4c:
1e:d9:e5:cc:d5:e8:05:4a:96:1d:3d:2d:a3:19:40:ad:81:17:
30:a0:36:ae:14:09:4c:93:8e:3c:39:e2:7b:e8:62:97:f9:73:
31:0e:ee:fa:9d:60:af:39:d8:be:70:ca:79:e2:76:4f:89:43:
20:96:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:03 2025 by rpki-client