
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
File: Vp3-Sa8607mlhpS6081OY4TwEYY.mft (raw, json)
Hash identifier: 4VtFhHtGQhjDinhMfGGAvJ8UrYedG8i4hefHxsp5i40=
Subject key identifier: 01:65:B0:6A:F6:59:60:59:6A:84:24:34:0F:8D:4C:9D:95:51:13:71
Authority key identifier: 56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86
Certificate issuer: /CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
Certificate serial: 019A71B7915BEBF29FE7F292C8FC83010120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
Manifest number: 4E
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: Vp3-Sa8607mlhpS6081OY4TwEYY.crl (hash: 4V9uev4DP0xBvq7LfhM8cGFofj0Qur63KM/LmXtjSoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:91:5b:eb:f2:9f:e7:f2:92:c8:fc:83:01:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=0165b06af65960596a8424340f8d4c9d95511371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:34:d9:b8:5d:b2:63:b2:07:5f:2c:e9:0d:
60:28:d2:39:b9:67:86:24:84:62:47:63:21:40:c9:
66:50:e8:ff:f2:ef:cc:80:ea:c0:c8:85:59:5b:06:
1d:a7:a6:53:92:40:cd:ea:9d:a8:11:a0:da:1e:5d:
bd:80:e4:4e:73:09:9d:ee:5c:70:86:61:ad:d9:5a:
06:a2:3f:61:9b:2c:7e:e7:9a:00:c1:41:af:0a:96:
45:83:66:3b:a4:8c:3a:fe:93:8c:07:cd:4a:1b:7e:
34:ce:c6:fc:84:e7:9f:86:d9:68:9c:cc:cb:58:9a:
44:18:76:25:5f:29:cb:93:3d:5f:3b:d0:7e:a5:70:
9a:64:33:38:03:87:cf:be:4c:d2:b0:65:8b:1f:78:
ac:09:34:62:a6:28:3d:62:c8:14:2a:1a:25:7d:c0:
c0:00:20:5b:70:52:d2:36:38:9a:f7:ba:ca:cc:b2:
18:a5:07:71:6a:60:86:3a:85:f0:7e:db:f1:4a:2d:
63:d4:61:2b:57:78:fc:85:4c:74:07:d4:87:38:e6:
58:c6:8c:cc:52:72:5c:bd:11:ce:01:a6:da:d7:13:
ea:a1:61:3a:a6:6b:43:80:16:82:27:16:e5:19:8d:
aa:d4:34:4b:21:0e:31:2b:af:0d:46:c5:d1:37:8e:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:B0:6A:F6:59:60:59:6A:84:24:34:0F:8D:4C:9D:95:51:13:71
X509v3 Authority Key Identifier:
keyid:56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:55:54:2b:da:cb:f7:a8:64:93:57:79:ef:ff:5d:20:cd:
9e:f4:d7:c1:03:62:4d:8c:b6:38:02:12:97:ec:73:d6:c3:3b:
ea:d1:e8:df:8f:60:c5:8d:20:cd:0b:2d:ec:d4:e7:9b:58:81:
e5:11:7e:aa:dc:ad:99:64:fc:d1:5d:49:ac:a6:28:c9:57:44:
4f:b0:c8:87:ef:a2:4b:76:2a:ba:48:d4:df:d0:27:c6:bd:9d:
14:19:19:88:b4:ef:4a:a4:8a:1d:28:1a:b9:47:46:1c:70:59:
7e:8c:d9:cd:50:0b:91:3e:ac:74:5d:48:0e:55:8b:ed:25:df:
93:76:65:c1:37:fc:f9:0b:d1:c1:f7:b3:8a:f7:0d:11:25:4a:
3b:c7:0e:fb:6b:cc:27:7a:3f:f8:bb:e1:22:4e:f4:f1:62:9e:
d7:e7:c5:fe:8c:70:3c:80:b7:37:fe:a5:67:a4:7a:b2:06:14:
3e:e2:ba:f4:86:9d:cb:ac:98:09:b0:f1:f2:e0:8e:67:1c:89:
56:cb:fa:18:cd:60:eb:76:6a:9f:36:2e:89:6e:fe:ed:13:c4:
0f:6c:78:1a:dd:99:d2:03:d4:d7:fd:f2:ad:d3:d2:2d:f8:8e:
bb:5c:3f:5e:d7:0c:95:34:ac:bb:93:aa:57:be:b9:5f:50:4d:
27:c3:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:30 2025 by rpki-client