
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier: sLTx+35N+FLoAInwRkithZOVroFjjDbb5X4N4RAOaFI=
Subject key identifier: EE:FC:8A:F6:FC:BB:4A:79:8C:DE:37:D0:4F:8A:57:DE:FD:E0:43:E1
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial: 019A73A70F70AED782357BA19005E419C885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number: 0864
Signing time: Tue 11 Nov 2025 16:01:59 +0000
Manifest this update: Tue 11 Nov 2025 16:01:59 +0000
Manifest next update: Wed 12 Nov 2025 16:01:59 +0000
Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: +aWT+enKt1Ij3S+ZD1lMt5oqb/MvBqwTxgancsuuzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:0f:70:ae:d7:82:35:7b:a1:90:05:e4:19:c8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
Validity
Not Before: Nov 11 16:01:59 2025 GMT
Not After : Nov 12 16:01:59 2025 GMT
Subject: CN=eefc8af6fcbb4a798cde37d04f8a57defde043e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:b1:35:8b:85:d8:55:68:a1:97:3e:e6:61:
22:c7:7d:d9:51:b0:21:4e:25:3c:1f:d8:d2:06:04:
0c:33:79:78:ee:ef:d7:54:ec:5e:cd:50:0a:99:19:
e9:df:9e:e2:2f:78:16:0d:67:0b:92:d8:90:33:0d:
73:92:25:2e:bb:ed:69:c0:fd:88:37:28:a0:ed:55:
16:29:f5:8e:dc:62:06:c3:77:59:23:08:40:e7:13:
4d:cd:68:17:6b:fb:a2:90:d7:09:7c:e3:3a:03:8c:
97:10:fc:90:82:4b:27:fd:2f:bd:3b:24:31:5f:42:
72:84:45:8b:df:08:87:ce:9d:7f:1b:d2:44:e8:eb:
d1:dd:1f:7f:c0:5f:11:7b:c8:58:ca:c9:4f:05:d3:
0f:14:21:b7:11:21:cd:29:4e:fd:b6:6e:4b:0c:b8:
a1:ac:87:e3:01:e0:61:b5:6c:7a:3a:28:ab:61:94:
66:61:f8:06:82:ce:03:3e:15:b9:be:7b:2b:5e:62:
c6:32:fe:08:da:20:a5:e5:eb:d5:ed:c0:ae:8c:e2:
b1:99:64:6c:ba:6c:b2:db:b6:68:3f:64:76:02:69:
4d:a1:ed:f8:5c:10:7b:e2:d4:36:8d:3f:21:cb:b6:
33:46:fd:83:fa:69:91:6f:55:fe:58:77:d3:30:89:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:8A:F6:FC:BB:4A:79:8C:DE:37:D0:4F:8A:57:DE:FD:E0:43:E1
X509v3 Authority Key Identifier:
keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3e:d8:2e:6e:81:8f:73:81:87:2a:96:19:03:60:1f:7d:35:
0a:66:a8:2e:8a:22:d3:65:6d:f8:e3:6d:ae:dd:12:d2:40:58:
f2:70:72:6f:bd:61:e0:a3:30:5d:6e:ac:e3:69:84:13:7a:68:
c5:3e:5e:88:02:11:94:cd:07:b0:f7:16:87:6d:ef:26:42:e9:
a1:2c:74:26:82:de:86:fd:51:91:a3:79:58:df:57:99:d7:e0:
39:0d:ef:c7:e4:b0:b9:8a:44:6f:66:6a:d5:a7:7d:31:d6:a4:
7c:d4:74:fc:27:63:0f:3f:25:c3:b4:29:98:ec:8b:b3:1d:bd:
f1:81:48:22:0e:4a:39:36:72:8c:3e:29:7d:25:53:ad:52:07:
05:3d:fa:fd:1a:00:2e:af:7f:28:ab:ba:78:44:2e:66:f8:05:
58:5f:a4:81:4b:82:c6:e1:7a:ef:69:13:c1:a8:03:88:9a:9e:
1e:08:28:06:fb:79:bd:0f:7d:7c:f6:18:cb:f6:62:f4:fa:b1:
78:48:c0:da:06:06:6a:df:fa:7a:c0:93:db:b7:66:f0:b0:65:
18:fb:42:11:85:a6:97:1d:ca:b0:8a:be:c2:f2:a5:b0:1a:f8:
fe:34:25:00:6c:19:0f:62:24:0c:d5:f4:42:2b:17:6a:e4:f6:
75:f1:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:23 2025 by rpki-client