Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File: VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier: ob1rIf95GTAyz/fh64UoOnIvYFNLPNTRUtUdk48pjuI=
Subject key identifier: 5D:F9:B6:E9:0F:C1:80:7A:99:5C:E5:16:14:17:D2:EC:34:E9:E6:DA
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer: /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial: 019A7225C23C8910D24DB0D1387D6A53D67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number: 058B
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: kJkPWTaFK4WCV/NRa+/aJMnJtHL2mkhHMRMyJL8FEA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c2:3c:89:10:d2:4d:b0:d1:38:7d:6a:53:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=5df9b6e90fc1807a995ce5161417d2ec34e9e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:2b:67:c1:0c:1c:6c:98:67:07:dc:7f:63:
a9:57:92:70:4c:47:52:dd:c6:6b:34:3c:2e:18:31:
88:f1:7b:b6:64:26:17:60:5e:75:38:2a:56:8b:41:
a6:3a:0f:4f:bb:84:16:15:95:fa:fd:f9:88:f3:fb:
72:fb:82:fa:36:21:e9:be:15:62:a0:63:04:59:61:
4a:32:69:17:b9:82:05:bf:ba:19:ba:6b:09:e3:ef:
10:d3:12:69:6a:8c:d7:48:0d:ef:f6:68:d6:e9:60:
37:66:ec:18:5c:a5:0f:79:be:87:ec:b9:3d:c2:a9:
1f:55:d3:d9:6c:c6:3f:36:ca:db:1f:fe:61:95:1f:
86:13:f2:31:84:c0:2e:7c:43:8e:19:eb:37:97:15:
7a:09:a7:6c:51:fc:89:61:f0:a4:57:9d:be:08:f3:
34:36:0e:d4:c4:32:d1:45:b2:1a:75:df:4b:0a:60:
06:31:9c:da:6d:cb:45:f2:77:ff:b4:42:bc:9e:7a:
09:12:09:77:fc:8f:e8:c8:f8:ae:f2:83:5e:cf:24:
8b:19:51:7d:48:bd:cd:46:1a:51:8e:55:c7:a7:af:
fd:3d:ef:bd:d5:bc:3b:b2:c3:45:41:d5:d0:41:62:
65:f8:b9:6e:b1:a9:41:e9:02:60:2d:9c:cc:92:de:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:B6:E9:0F:C1:80:7A:99:5C:E5:16:14:17:D2:EC:34:E9:E6:DA
X509v3 Authority Key Identifier:
keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:0c:27:f5:73:7a:e6:9a:7a:96:77:a0:3f:6f:52:0b:12:
94:76:82:e0:a9:6f:f9:06:eb:ee:56:1d:79:6e:4e:a9:d3:c5:
23:f4:0d:e6:62:10:46:93:47:da:28:ed:7e:78:34:ac:41:44:
ce:5d:61:11:80:22:04:cf:d5:a9:9f:93:1a:b8:b0:5e:cb:59:
5f:fd:1a:fd:cf:36:d3:fd:6c:01:f5:fb:bd:e3:2e:3f:37:60:
2a:31:33:cb:88:7d:35:01:dd:d8:f2:c5:52:c7:34:96:64:e1:
e2:46:df:17:2a:d3:5f:7f:42:45:24:98:55:25:37:57:79:63:
58:4a:09:57:2c:73:e9:eb:36:3c:e7:41:c8:da:7b:35:5d:6f:
a7:83:98:de:f5:0a:0f:a9:be:6b:52:de:4f:6f:e0:fc:39:ea:
60:58:ca:19:b1:d1:ba:44:3a:07:58:12:ec:00:18:1c:6d:de:
37:09:f9:2b:8a:ed:99:ee:60:9a:c5:58:a0:47:f4:09:ab:da:
c9:a6:cb:e8:46:74:f0:c5:b0:14:9c:65:fc:0f:a5:11:2b:e9:
52:51:e4:0a:fb:c3:c3:75:79:64:0e:e5:3c:1e:fe:21:f1:18:
4e:d0:ca:05:78:07:34:4e:c5:a9:ae:69:bc:d2:cd:48:13:48:
1f:f9:fd:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcI8iRDSTbDROH1qU9Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Zjg2ODFlZmIyZmE5ZGNkNDhjN2M0ZmFmM2Q3OGMzYTFh
ZDJkZDEwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
Eyg1ZGY5YjZlOTBmYzE4MDdhOTk1Y2U1MTYxNDE3ZDJlYzM0ZTllNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgQrZ8EMHGyYZwfcf2OpV5JwTEdS
3cZrNDwuGDGI8Xu2ZCYXYF51OCpWi0GmOg9Pu4QWFZX6/fmI8/ty+4L6NiHpvhVi
oGMEWWFKMmkXuYIFv7oZumsJ4+8Q0xJpaozXSA3v9mjW6WA3ZuwYXKUPeb6H7Lk9
wqkfVdPZbMY/NsrbH/5hlR+GE/IxhMAufEOOGes3lxV6CadsUfyJYfCkV52+CPM0
Ng7UxDLRRbIadd9LCmAGMZzabctF8nf/tEK8nnoJEgl3/I/oyPiu8oNezySLGVF9
SL3NRhpRjlXHp6/9Pe+91bw7ssNFQdXQQWJl+LlusalB6QJgLZzMkt4eXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF35tukPwYB6mVzlFhQX0uw06ebaMB8GA1UdIwQY
MBaAFFb4aB77L6nc1Ix8T689eMOhrS3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzkt
ODNhOTM1MTVjYTYzLzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzktODNhOTM1MTVjYTYz
LzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRIMJ/Vz
euaaepZ3oD9vUgsSlHaC4Klv+Qbr7lYdeW5OqdPFI/QN5mIQRpNH2ijtfng0rEFE
zl1hEYAiBM/VqZ+TGriwXstZX/0a/c820/1sAfX7veMuPzdgKjEzy4h9NQHd2PLF
Usc0lmTh4kbfFyrTX39CRSSYVSU3V3ljWEoJVyxz6es2POdByNp7NV1vp4OY3vUK
D6m+a1LeT2/g/DnqYFjKGbHRukQ6B1gS7AAYHG3eNwn5K4rtme5gmsVYoEf0Cava
yabL6EZ08MWwFJxl/A+lESvpUlHkCvvDw3V5ZA7lPB7+IfEYTtDKBXgHNE7Fqa5p
vNLNSBNIH/n9Hg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:59 2025 by rpki-client