Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: s267R7e4awvhYleYlBSib8I6puxz4lD//8oYARU1KDY=
Subject key identifier: F0:57:BE:F6:15:B1:E4:47:84:7D:D6:BE:5E:5A:A9:1B:F1:46:68:B9
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 019A71B8AE3FEDC7EC8D51869B145019B952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 0A0E
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: OYVb5br+Npc0+7ztZD4KkHmBcWUTC4yroNCXb0SDd/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ae:3f:ed:c7:ec:8d:51:86:9b:14:50:19:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=f057bef615b1e447847dd6be5e5aa91bf14668b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:1b:de:1c:8a:d2:1c:74:e1:cc:b1:29:0a:
60:37:0a:74:e4:cd:64:d2:4f:bb:78:84:3d:f9:2c:
ab:7f:e0:cf:8b:a7:bf:c5:8e:06:3d:89:1f:bc:c5:
af:cb:50:ab:b9:6d:74:d2:1b:2d:72:6c:19:cf:e1:
43:62:27:bc:6a:bc:c6:cf:31:29:2d:34:68:2f:1b:
74:0a:dc:69:2f:d0:76:c6:a1:96:5c:04:48:34:6f:
78:01:71:4d:4b:19:d5:ca:42:8d:0b:d1:00:3c:fb:
c2:bc:ac:00:97:dc:8a:e6:c5:da:65:e9:86:9b:f3:
78:3f:ba:46:61:dc:d0:a9:d1:98:98:8b:7d:ec:ee:
3e:a7:2c:bc:20:4d:99:b3:67:b7:25:d6:6a:fb:13:
8d:c9:cb:fa:34:18:eb:8b:b7:fb:50:db:79:ff:31:
7f:7d:8c:11:7e:b3:ed:a6:b8:79:1f:9d:6a:36:f6:
0a:67:09:79:82:03:c4:4d:13:9f:29:5e:41:8a:1b:
a0:a3:96:e2:03:73:24:fb:a3:0d:4e:c4:20:5f:c6:
be:af:93:54:de:48:e5:37:bb:c9:17:78:1d:c5:1d:
6f:4f:46:b7:2c:8a:14:8e:ff:e4:36:bd:63:7e:ce:
e1:2d:6f:3d:8d:66:7e:23:e9:9d:4b:2b:41:0b:d1:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:BE:F6:15:B1:E4:47:84:7D:D6:BE:5E:5A:A9:1B:F1:46:68:B9
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:1b:bc:03:3d:b0:67:e7:52:8c:a4:f4:e1:be:fa:a1:02:
ba:06:de:b8:69:85:44:ca:cd:43:5e:7d:cf:b6:d6:a5:ac:12:
25:b2:2b:26:88:3e:64:ec:bd:8d:d5:9f:a7:96:34:06:64:ce:
bf:ec:22:24:f2:b0:41:91:fd:b0:22:be:11:02:05:c3:f7:c0:
81:5e:e4:c9:73:36:27:14:fd:82:f6:4a:36:1f:c9:b2:5b:a7:
53:b3:60:be:bf:29:24:af:29:45:1a:c5:8a:f7:70:2b:b2:c5:
fb:91:c0:ef:21:b1:96:1d:65:18:48:ae:b0:f1:48:64:71:bb:
8a:72:3c:e3:d0:65:9d:fc:e3:8f:20:6b:c8:10:f0:67:e4:4e:
45:a0:a0:d9:55:39:b8:4c:e1:33:7c:2a:db:a6:e5:11:17:a9:
99:a1:5f:96:5d:b3:89:de:22:6b:f3:49:25:d1:cb:c7:0b:8b:
8a:ad:7d:62:ed:61:c7:f2:68:09:b4:cf:d2:1a:86:22:31:f1:
34:1d:a8:60:26:23:0a:1d:37:61:47:50:94:c7:d7:0b:35:55:
65:73:85:ee:c6:45:89:81:ec:72:16:35:22:b4:9a:e8:a2:e1:
6c:6d:f9:05:e6:16:97:29:7c:89:ca:0a:06:08:46:f0:d8:33:
64:aa:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:26 2025 by rpki-client