Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File: ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier: 08HilPuadMqgAn/65DFSEmlBiUUdb106pkBn7+k9dTI=
Subject key identifier: 53:76:0C:6D:F5:45:66:A9:61:99:87:A4:82:F2:A3:CC:6F:C9:3F:54
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer: /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial: 019A72932D6D4E0EB14B554E27290EF17CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: hO5r11jKAOTJwAULBPYV4qjD+3xrE+T1F58VMUhpoIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2d:6d:4e:0e:b1:4b:55:4e:27:29:0e:f1:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=53760c6df54566a9619987a482f2a3cc6fc93f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:1a:e7:b4:7a:c8:21:a2:13:30:c8:02:ae:
75:a4:df:62:fe:bc:41:dd:70:30:b4:e1:ce:35:7e:
52:71:ef:72:56:6a:e8:80:96:64:99:3e:8a:0d:3e:
6a:bb:e5:8e:88:1f:23:a6:c8:6e:66:ba:71:19:33:
14:26:f2:87:ab:c5:c3:af:e6:34:66:2f:87:97:cf:
13:5e:7b:b7:09:74:64:ef:fa:fb:68:a4:db:85:ae:
3e:73:fc:7e:e6:ef:42:57:ce:44:2d:fc:b6:bb:5b:
88:ef:ab:75:80:67:3c:f5:bd:cb:80:d6:17:76:f3:
28:22:bd:c0:67:e5:37:09:77:7d:48:e7:2b:ce:3e:
7e:89:42:87:c9:b1:ba:8d:b6:77:5e:97:0e:9d:4d:
d4:e4:b7:d8:27:d0:ff:57:f3:78:e9:b6:d6:9b:cf:
12:e4:41:d4:5b:73:35:88:6f:1b:01:64:07:cc:dd:
ab:34:53:b0:53:1d:6f:d4:9f:9d:eb:70:83:47:7a:
a6:68:45:8f:b7:c7:6a:89:42:b1:2b:e8:fe:42:f9:
a3:b4:6b:72:0e:b6:58:3d:4d:ee:96:76:69:24:49:
67:3f:f3:ab:5b:a3:95:c6:d7:41:f1:d3:dd:66:18:
bd:d6:28:27:00:ad:3d:2a:2f:fa:c3:d6:3b:60:53:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:0C:6D:F5:45:66:A9:61:99:87:A4:82:F2:A3:CC:6F:C9:3F:54
X509v3 Authority Key Identifier:
keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:d8:40:7b:a6:23:53:79:b6:5f:6d:f0:87:af:95:28:d9:
94:ae:44:f2:1f:6d:5f:23:ea:e3:ed:61:3c:3c:8c:8a:52:c7:
da:de:1b:7d:ba:45:bc:e0:c8:a5:12:39:bf:73:f7:ef:e0:54:
2b:3b:1b:0d:15:4b:06:b9:d9:80:f8:17:4d:1d:c2:3f:ce:ce:
05:ea:24:91:2e:ab:57:2c:43:12:d3:e2:64:c8:e5:c3:4e:b3:
01:54:4d:a9:0a:31:8a:3d:f2:ab:fc:7e:be:ee:66:1c:3d:6c:
14:71:63:83:03:53:5a:56:dd:cd:4e:74:c0:65:30:c5:4d:7a:
10:58:a4:a6:64:ee:a6:e5:0d:a6:4e:c4:26:8c:46:15:e6:d2:
2b:f0:eb:87:58:51:69:a2:6e:41:d2:eb:26:3a:34:dc:40:b7:
ab:07:8e:d3:4b:b6:79:eb:77:e9:84:2c:8b:35:d6:ee:f8:e0:
e3:b4:fb:27:9a:67:c9:a3:b1:c8:2e:f3:e3:51:d5:2d:b8:de:
da:e8:7c:8c:85:c8:e8:dd:87:a5:d5:74:57:e3:05:e8:d9:30:
0e:0b:39:70:ea:ad:ce:4a:e7:6b:c8:05:9a:c0:c6:10:bd:2e:
38:ae:95:e4:ff:f6:ad:5c:78:41:a2:87:7a:d2:12:b7:b1:ed:
39:17:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client