Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier: 3n1b/U9IIp42hSUid1YQ9tz6yVyL78UkLu/gW5KrioQ=
Subject key identifier: B5:80:3D:B7:C0:3A:32:B3:3D:07:8C:D5:3B:07:D8:0D:39:71:70:05
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial: 019A70DC75E3902DFF2003B9D291FEE5E093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number: 1458
Signing time: Tue 11 Nov 2025 03:01:27 +0000
Manifest this update: Tue 11 Nov 2025 03:01:27 +0000
Manifest next update: Wed 12 Nov 2025 03:01:27 +0000
Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: 10yjQbV10Fm7hJ94qUhwr1aN5TEKl6n1xWZKu3Zm82o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:75:e3:90:2d:ff:20:03:b9:d2:91:fe:e5:e0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Validity
Not Before: Nov 11 03:01:27 2025 GMT
Not After : Nov 12 03:01:27 2025 GMT
Subject: CN=b5803db7c03a32b33d078cd53b07d80d39717005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:73:5f:5d:fd:f3:8f:ec:a6:53:e0:db:b0:
74:ea:cb:17:6a:e0:6f:e0:c8:ad:7a:6a:10:14:52:
e5:8b:d3:62:4e:51:27:5d:22:e1:04:ad:3a:15:0f:
8b:6c:23:2d:8a:ee:a8:11:14:a9:fb:67:a3:6f:4f:
be:8c:56:b6:60:9e:d7:56:48:8d:60:72:17:e1:22:
49:49:e4:c7:08:e7:bf:5c:f5:a6:f0:04:8f:1b:3e:
32:ee:e7:58:a4:23:8e:eb:16:d0:36:9a:89:71:36:
85:81:bb:ce:e6:e0:e5:56:e0:99:34:3a:ee:f7:f7:
b1:64:26:bb:84:6f:8e:20:25:1e:11:99:0b:23:a4:
01:da:c7:4e:82:44:82:1c:c0:91:fe:2a:35:44:c3:
26:17:91:23:c2:6e:8c:17:3c:6e:ad:00:81:91:7a:
6f:a4:81:86:15:d1:d6:a3:4f:fb:a9:62:5a:dc:70:
d3:48:61:f0:f5:27:25:fd:e7:43:96:91:36:fe:cc:
1a:f3:fd:cb:ba:ad:5f:1d:47:02:ed:f4:6a:48:57:
27:71:bc:2d:f0:5d:8d:41:f5:ed:a9:82:6b:57:d8:
ef:28:ed:d3:fc:76:b8:9f:48:0a:86:dc:63:1b:14:
24:6e:ea:e9:e2:d9:3e:54:30:66:54:c6:69:8f:32:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:3D:B7:C0:3A:32:B3:3D:07:8C:D5:3B:07:D8:0D:39:71:70:05
X509v3 Authority Key Identifier:
keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1a:7b:ca:d5:b1:da:ff:84:f1:cb:b7:30:36:cb:f6:c4:b0:
af:eb:c2:bf:9c:63:23:ee:a3:dc:c5:6f:a1:92:a5:03:d9:12:
d6:26:70:e0:12:fa:5f:c4:0f:0a:f2:2c:cf:ec:dd:64:8a:42:
bd:9b:f1:4c:a0:20:b7:2f:a0:a6:1a:f1:56:7c:e8:57:5b:c7:
eb:ff:19:23:73:af:c4:4e:44:19:25:34:25:3c:4e:50:6b:9e:
70:96:fb:bd:93:ef:2e:2a:26:f4:c1:d0:37:87:8b:be:93:44:
b6:2a:8c:5b:39:c7:18:fb:63:58:8f:23:56:40:51:ab:fd:76:
ef:92:42:c9:bf:9e:6f:a3:1f:a1:74:fa:81:03:00:75:3e:ec:
0d:68:26:96:4b:f6:5a:f0:de:4c:ba:78:1a:1a:59:db:54:87:
38:c1:b2:da:90:55:25:4b:39:9e:a7:f1:7a:34:aa:39:11:74:
24:a7:27:93:40:4a:ab:b7:9d:0e:5d:f7:40:8f:f5:dd:b9:07:
c3:bb:b1:2a:41:3d:06:86:6b:06:3b:74:16:65:b3:a2:88:a0:
94:80:db:56:e8:b4:22:32:ac:0f:0e:ae:fc:61:f0:b1:a1:0b:
a8:de:5d:07:c5:75:ff:bc:6c:2b:10:4a:6e:36:cb:44:d3:02:
89:51:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client