Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
File: VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json)
Hash identifier: zUDrHmUPaXbYa9sH0AuCj/MyLydYnhMMQeJJLh/qPCk=
Subject key identifier: E7:0C:23:D8:A5:4D:FD:9C:40:AC:49:1F:73:3D:28:E5:49:63:5F:BF
Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
Certificate issuer: /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Certificate serial: 019A73386979D7B2C68161EDCD96FA8570E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
Manifest number: 0278
Signing time: Tue 11 Nov 2025 14:01:07 +0000
Manifest this update: Tue 11 Nov 2025 14:01:07 +0000
Manifest next update: Wed 12 Nov 2025 14:01:07 +0000
Files and hashes: 1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: lcTRAx1fQ1u94PayNj32Gz8xaQ2JGOOHcnl1qEwVtMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:69:79:d7:b2:c6:81:61:ed:cd:96:fa:85:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Validity
Not Before: Nov 11 14:01:07 2025 GMT
Not After : Nov 12 14:01:07 2025 GMT
Subject: CN=e70c23d8a54dfd9c40ac491f733d28e549635fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:2f:41:63:fa:49:de:61:bf:a9:7d:72:5d:
fe:07:21:67:05:8e:9e:fe:22:2e:51:50:bc:5b:34:
47:e1:5a:3c:8e:d7:a1:70:c1:a8:64:47:2b:4b:d2:
0a:91:1f:e3:0c:5c:d4:06:63:e3:da:69:dd:5e:7c:
0f:47:e7:ba:57:ff:c8:12:62:51:25:42:46:54:73:
9c:5b:7e:e7:40:66:bf:dc:6f:5e:c5:52:c4:d8:da:
00:0f:d5:60:2c:d5:c9:63:2b:e8:b8:fb:04:8a:c1:
74:c8:8e:11:16:bf:8c:99:b5:38:87:44:71:a8:16:
46:26:96:2e:3a:ec:72:0a:cd:25:32:cc:ae:6a:85:
f5:8c:ba:e8:92:fb:a0:c3:a3:49:c4:36:2f:f5:f0:
1d:9a:87:58:da:46:cc:09:be:c0:63:3c:e7:c8:da:
4c:ad:f1:33:df:6d:cb:49:88:bf:2c:db:d4:e6:5c:
4a:cb:f3:8c:c6:21:dd:5d:13:0d:96:1a:d0:73:8a:
52:9a:38:02:a9:ec:c7:ea:5e:bd:c5:d0:e5:cc:e2:
14:84:27:77:db:ae:f1:dd:66:6d:7f:40:00:5e:18:
ea:dd:8f:82:44:96:79:1b:e7:2b:b1:04:39:ec:94:
2f:70:0a:50:c3:98:bc:68:44:f7:30:82:47:32:92:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:23:D8:A5:4D:FD:9C:40:AC:49:1F:73:3D:28:E5:49:63:5F:BF
X509v3 Authority Key Identifier:
keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e9:b3:7a:be:91:e6:fb:16:7c:49:f7:c2:84:d3:fc:88:40:
d7:24:d2:5f:71:90:19:41:03:e2:8c:f6:1b:df:fc:55:06:df:
b4:a6:7f:fd:97:ae:c3:b9:99:da:2d:1c:5b:c2:68:92:26:0b:
98:52:42:14:32:e1:91:fe:2c:8b:ca:c5:f2:a3:c4:29:46:17:
87:b4:f5:b3:46:e6:df:23:dc:4f:37:08:b4:09:91:bd:ae:ba:
54:ec:85:78:2e:70:93:8a:c4:23:0f:a4:24:dc:8a:14:72:b1:
3c:68:e5:ce:36:ba:77:89:94:13:a9:fd:e4:8c:dd:44:53:c4:
79:a4:18:cd:29:2e:99:96:01:ac:12:98:4b:60:0c:b6:05:31:
09:f8:82:12:4e:cc:b2:7b:e9:88:66:fc:79:68:2a:97:80:84:
03:51:e7:67:6c:92:ee:79:b7:1c:e2:78:5f:2f:4f:97:94:ba:
3e:4f:54:4d:2d:e2:73:76:c4:32:02:d8:f8:c6:9a:26:af:9f:
c7:ce:7a:46:41:00:cc:20:b6:9c:9a:4d:e7:25:70:c4:3b:03:
2c:67:1b:9c:3c:63:3c:00:8d:c1:99:62:c8:c0:16:bf:ad:3b:
75:e9:cb:f7:11:72:bb:9c:a5:39:84:a1:13:61:35:12:1f:14:
fe:18:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client