Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: Ka2amwLkdMYX205KmdLEdZcW73R9GzLsoaNo6SDbPgk=
Subject key identifier: F9:1F:55:00:05:35:D9:37:2F:E8:2D:96:F5:AF:85:CD:33:D2:87:EF
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019A7113374B06D49878D247FBE11D62FDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0D73
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: LitNnQMukde/4ZjSm/cBqVX9A1DhVXevp8SijNVR944=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:37:4b:06:d4:98:78:d2:47:fb:e1:1d:62:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=f91f55000535d9372fe82d96f5af85cd33d287ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:90:9a:de:f8:44:fe:12:47:7a:54:88:c4:
c6:c3:74:92:97:67:24:24:45:96:f8:e4:d9:08:55:
ae:8c:27:21:b5:fe:61:94:24:e7:3a:5b:b6:c1:84:
90:1e:87:02:66:fd:c2:7b:ce:49:ea:86:64:96:e5:
43:4a:92:79:df:ce:03:3c:bc:cf:9c:1d:cd:28:3c:
9c:3b:15:1e:f3:66:52:0e:73:8f:5e:00:e1:aa:3e:
51:3e:8b:1b:21:47:92:be:bd:c2:64:e5:61:e8:47:
9d:2b:19:99:0c:8a:85:e0:b4:c6:63:ce:16:e1:91:
b9:5d:d3:41:dc:d3:b6:34:e4:a5:8a:8c:40:2c:4e:
31:c3:72:c6:59:19:8e:e0:3f:93:1c:4c:41:74:80:
5c:ec:12:9c:16:90:ba:a2:37:97:7b:7f:2d:8b:dc:
3d:6d:4f:a1:71:f4:ba:01:ae:20:1a:92:75:2d:c8:
21:68:c1:2c:bb:b0:3c:a0:15:e3:8a:1e:f9:af:66:
4b:7e:f3:a0:21:3d:f9:ce:ed:00:e8:fa:ce:37:d5:
9f:5a:ef:a1:fe:6b:f9:f5:6d:d8:ff:b3:36:25:cf:
5f:6f:46:24:83:df:3b:3f:c0:8e:b9:fe:bb:14:26:
31:74:cf:8a:f1:0e:f4:88:61:c6:76:3a:c9:c7:1d:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:55:00:05:35:D9:37:2F:E8:2D:96:F5:AF:85:CD:33:D2:87:EF
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cf:1a:8a:1e:30:b3:9c:37:06:78:c0:95:a3:48:ca:64:4e:
18:45:98:5a:8b:da:3c:55:1c:ca:ca:4a:42:a8:76:73:3b:a8:
79:77:71:ed:49:ae:51:0b:9a:4f:0c:6c:c5:a4:c9:e7:72:4e:
70:f5:b2:8e:80:bf:db:de:3d:a8:c0:80:2c:0b:68:70:e4:fa:
24:97:f7:7d:2d:1c:c6:e5:00:03:0c:be:61:67:d9:ef:5a:aa:
fb:e5:1c:b0:7e:f3:b3:84:6b:c2:58:33:1f:6b:b8:d3:7a:b7:
b8:08:8d:cb:35:10:52:3a:13:34:b3:76:12:3d:77:b8:7d:92:
0a:b5:b4:11:64:52:b5:30:ea:5e:c1:3d:55:eb:05:6d:3c:f6:
1d:cb:ad:6d:2e:d3:23:f9:f1:43:9a:86:a7:b2:ee:30:ea:a6:
90:86:fe:08:6a:b9:b7:63:bf:da:53:39:19:a5:98:05:96:d9:
c8:f7:5f:4e:99:3f:5f:07:5b:1b:84:29:29:57:ff:2c:f2:27:
58:f8:14:de:8e:90:49:83:11:a2:2b:d0:9f:77:13:33:c4:ff:
2a:8a:91:7b:cc:c9:84:f3:c4:fa:e3:f5:c4:37:33:cb:ea:49:
e2:bb:5d:9e:dd:c5:57:01:9c:f3:81:72:96:4a:4f:47:ec:7f:
2f:73:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:13 2025 by rpki-client