Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: hEZ8ckFdGZ8dxzUBieybgvBDHmvBfURRLNAHxh00bTQ=
Subject key identifier: D7:F2:19:8C:D2:98:9C:2E:AB:E0:86:A8:7F:BF:DB:75:3C:92:CF:61
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 019A72262EE7D2A5655EDE0F79C4BCFD90FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: iE3gSdgp2x1OIcP2rOrPNFUm7uLOG1P/eMOGTGQvKeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2e:e7:d2:a5:65:5e:de:0f:79:c4:bc:fd:90:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=d7f2198cd2989c2eabe086a87fbfdb753c92cf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:51:c8:bb:c9:17:32:f3:f0:00:95:77:93:
ac:42:65:0d:93:d9:73:94:fe:51:7a:86:84:f0:57:
ea:67:64:1e:eb:e1:0a:24:e7:e0:7a:ef:ad:0b:1b:
f4:4b:ab:2e:0a:6f:c6:2a:fc:42:78:3a:ad:c3:4d:
87:aa:3c:ce:7c:d5:20:1c:1f:4b:d7:36:d5:37:55:
4e:4d:c8:ad:5e:f3:12:a1:41:34:18:67:f3:51:f3:
92:22:28:8e:2d:e3:f5:9b:00:93:bd:59:2b:e6:eb:
4a:6b:1e:02:95:6d:e4:7b:69:58:91:01:6a:89:14:
1e:f1:15:95:95:bc:e8:6f:72:bc:80:35:f1:b1:9b:
8f:bf:9d:16:2e:87:27:83:3d:7c:d8:76:39:67:99:
39:22:c4:5c:31:a5:07:9f:ab:36:72:78:a0:c0:03:
30:2e:a3:4b:99:95:f6:95:56:12:36:01:ae:a7:44:
58:cd:a8:30:ba:06:26:e4:05:dc:3e:40:11:3a:28:
d0:37:37:8f:a9:35:ca:43:2a:21:6c:f0:5a:10:f8:
8f:f5:7d:73:b1:e3:fc:eb:1d:1a:51:3d:ac:fc:0a:
bb:9d:7f:78:2b:c2:67:b6:19:fd:05:40:5e:30:1a:
2f:9d:53:f2:1d:a7:d1:ee:8e:55:d0:e2:87:85:67:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:19:8C:D2:98:9C:2E:AB:E0:86:A8:7F:BF:DB:75:3C:92:CF:61
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0e:79:cc:07:e8:71:1e:8f:46:ba:da:0a:f5:89:fc:a1:6c:
30:4e:ea:e6:3b:f2:d8:3d:01:cf:82:db:26:bf:ec:ef:2f:74:
53:fe:f5:b7:dc:0f:88:23:1a:01:2b:16:c0:74:c2:4d:a9:9b:
ac:a2:68:b5:35:a4:e8:7e:a2:84:9e:5d:96:c3:72:6a:e3:f1:
61:10:27:c4:86:fd:e6:01:ac:61:9d:19:7b:c8:df:56:89:6c:
09:6d:c9:02:d8:72:2c:87:e8:ce:f5:ec:57:6e:92:07:00:26:
07:73:12:2f:e9:10:53:45:da:cc:6d:30:6b:c8:14:83:8c:98:
e3:9c:8d:07:71:b5:44:3e:96:3d:99:bf:61:dc:1f:48:4c:04:
fb:da:91:f1:3c:a2:3d:c5:a0:fa:03:e0:70:0c:52:d1:99:5d:
a4:65:12:c9:55:a8:d4:1c:cb:33:26:a4:78:9a:d8:31:d9:ca:
8d:53:23:26:ac:8b:b0:7f:29:17:17:5d:6d:00:15:05:74:ed:
16:bb:0b:d1:9e:23:32:b6:41:d3:56:af:18:05:7c:71:af:f5:
55:80:6b:39:50:f8:dc:ce:86:be:16:8c:ad:8c:0d:6e:1c:ea:
2f:17:5d:b8:7c:93:f5:e8:c8:51:19:67:01:b1:0a:cf:42:b9:
82:a5:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:30 2025 by rpki-client