Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File: vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier: PtQ4/e64pK6FqEdsME9RrQbyYUiWQoxmRy4672JfDw8=
Subject key identifier: B5:CE:07:F5:DE:CB:F7:42:9E:72:C8:F8:61:A6:C1:95:AE:6A:82:BE
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer: /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial: 019A7112B23CB85C3326602EF3C27957CFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: KW8xSEZMYmhus4coDoNbdJ3CySxrZioDvKgcrJ9lVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:3c:b8:5c:33:26:60:2e:f3:c2:79:57:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=b5ce07f5decbf7429e72c8f861a6c195ae6a82be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:e3:e6:14:55:43:5d:2b:de:8d:4d:bc:38:
ad:79:6f:c3:5d:68:a6:07:a1:03:20:41:73:9d:f2:
20:00:d2:84:08:e1:16:06:05:69:85:09:1b:71:8c:
76:71:5b:01:b0:ab:69:0b:7c:90:d8:b9:96:0f:62:
d2:72:4e:f4:77:22:23:a1:47:17:e9:c6:45:3a:a4:
51:9a:5c:16:72:7f:a4:1f:4c:cd:21:ca:b6:06:21:
ef:e6:91:da:a5:e1:51:a4:95:9f:ea:b4:6a:e4:de:
22:4e:88:07:f2:01:e3:f8:e3:10:2b:08:92:53:c7:
01:35:d4:7a:a6:09:02:14:ce:81:83:62:89:a0:ec:
ba:ac:42:05:cb:68:00:1d:d2:20:84:0b:de:ec:38:
f3:af:42:4d:52:ac:14:92:9e:cd:91:bb:14:34:e6:
ee:b5:08:92:2d:a0:fa:34:04:56:81:d3:a6:f0:35:
16:7b:6c:aa:21:89:5b:92:4e:2e:94:cc:ae:6c:f0:
ea:c8:f1:be:1f:98:22:58:3f:c3:c6:8d:69:36:57:
2e:12:e1:24:6e:87:73:9d:8f:4a:5a:b7:b9:2b:8a:
ca:41:91:54:23:48:99:83:59:fb:73:e7:78:5d:43:
e0:21:a9:49:39:33:87:84:4b:49:22:88:8a:40:1d:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:07:F5:DE:CB:F7:42:9E:72:C8:F8:61:A6:C1:95:AE:6A:82:BE
X509v3 Authority Key Identifier:
keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e3:b3:99:bf:d8:12:ef:6d:07:4b:a2:87:fa:42:dd:53:cb:
23:3b:8d:43:d3:40:93:2e:87:51:64:94:4b:dc:b8:70:0f:70:
aa:fd:7b:d7:0d:75:da:6d:94:bb:32:e7:67:9d:7a:12:da:dd:
a2:5c:61:97:8e:59:3f:76:b0:4b:f5:fa:2e:43:6a:e0:3b:c6:
1e:7b:3f:dd:0d:26:93:be:67:f4:42:07:77:c2:1f:12:4f:ad:
48:a6:d9:07:f3:9a:7e:bc:7c:27:d4:f5:15:cb:31:f8:d1:cd:
52:ed:a5:91:e1:fa:a4:07:35:a1:90:1f:a4:68:d9:47:d4:ce:
7d:0f:3f:07:99:c0:cc:df:b8:f9:f8:ae:c5:6b:0e:35:5c:32:
20:28:e4:df:0d:1c:22:92:f2:ee:68:8c:03:da:f5:77:a1:a5:
4d:07:55:63:18:2b:ce:8b:f6:1c:4b:55:7c:8f:85:86:35:23:
72:ec:47:4e:18:44:67:8b:ad:e0:37:73:4c:1d:c7:48:dd:3f:
03:39:70:96:92:86:9d:45:07:54:e4:d8:a0:c0:c8:ac:ce:83:
0a:88:b6:78:f8:84:4a:42:9f:3f:f6:01:82:96:28:9a:b4:9b:
bb:f7:e2:c1:f7:e7:18:5c:28:0e:45:06:be:28:e1:85:dd:c3:
84:a0:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client