Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: W/iAy8gKP8Jf+d0R5mz9rxNprmmyjoO8FJ3d+T+ZMjw=
Subject key identifier: ED:C5:33:93:AB:48:AD:A6:BD:1C:00:7D:1C:5D:5A:5C:E2:65:C9:49
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 019A71B7F0A708AD23CC2ADA5A4182D56E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 10E4
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: z3ClV3XkV8thKJU+wWfMxaMSKPk4ExxeWPOBj6X4Kdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:a7:08:ad:23:cc:2a:da:5a:41:82:d5:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=edc53393ab48ada6bd1c007d1c5d5a5ce265c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:2b:aa:ff:01:c1:a7:2c:84:20:22:cd:d7:
f1:d8:23:c4:e2:97:02:8c:94:a4:df:4b:2d:3b:d0:
0d:6c:92:f2:1f:5f:51:78:94:9f:f3:08:cd:1a:39:
f9:5a:14:b2:55:63:dd:60:c7:57:90:38:65:7e:07:
2c:b9:9c:4e:6c:6b:f9:99:d8:40:d1:90:9b:35:60:
85:cb:92:12:95:90:0c:59:65:a1:95:75:8b:08:45:
0c:6c:fb:8e:d1:a5:93:44:55:4e:44:e1:e4:a6:97:
96:4b:9d:cb:db:f1:e0:f8:a0:df:2e:45:bb:a1:16:
12:3a:76:7f:34:4a:94:8a:0e:bb:21:e5:2a:92:b7:
b7:02:d3:08:e8:18:13:89:63:48:8d:48:87:6d:78:
d3:2d:28:ac:46:c0:25:e5:62:54:cb:2e:83:16:7c:
fb:e6:6f:b1:86:6b:c2:6f:7b:e7:f9:bc:7b:25:22:
7b:12:9b:97:db:49:96:82:e6:26:6a:0c:5e:dc:a1:
5a:2d:49:48:9f:36:f6:53:5b:f7:05:af:36:f3:5e:
00:c8:34:26:fb:e1:92:53:44:05:f0:ba:d4:e9:54:
4e:3a:7a:63:43:52:ef:92:ac:b8:ec:8a:31:de:0e:
3c:2f:1d:4b:9a:ea:d4:71:ea:7f:18:7c:40:85:2c:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:33:93:AB:48:AD:A6:BD:1C:00:7D:1C:5D:5A:5C:E2:65:C9:49
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:3b:8f:a5:f9:d1:2e:4b:6c:e8:57:4d:49:b9:25:29:48:
34:0b:d8:39:70:37:c7:89:24:5f:f7:ed:e2:e2:32:c2:72:40:
c2:eb:d9:b9:be:fa:1a:85:97:91:ea:c6:31:15:8c:5f:cf:e2:
44:f5:d4:06:db:86:5c:d3:3b:53:26:a3:79:60:b3:dc:cf:b6:
1e:63:b4:fe:04:a3:e6:55:6f:fd:e1:78:0d:e9:17:fc:35:46:
07:3f:e9:58:88:5e:2a:d9:a7:80:a3:94:e5:b4:5c:f8:a3:bc:
df:f4:94:ea:60:09:63:de:4c:c4:c6:1c:ac:dc:e1:fb:25:c9:
1c:1e:25:86:ba:66:25:2d:3b:c0:80:2b:2b:ff:59:de:5d:67:
70:a8:f2:f8:d1:61:81:f7:3e:8c:90:6f:ce:7e:cb:a8:73:e0:
a7:82:10:02:23:61:f9:dc:20:3b:c4:9c:57:d6:88:bc:81:f2:
aa:ce:32:88:32:e0:51:52:bf:a9:1d:18:c5:09:d0:e8:49:e5:
4e:49:8b:02:c9:b8:a3:ad:dc:50:3b:42:4e:f8:e2:8b:07:fd:
cc:26:da:18:19:a3:84:4b:dd:92:cb:af:26:de:e8:ef:5b:aa:
e5:bf:4d:34:79:e2:87:93:c8:67:2b:cf:f5:4a:d6:37:f2:c4:
77:25:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client