Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: QGpcJ+t5HtbqsPldBdH8I/G0vpPEXUsM3snxkp/JGj4=
Subject key identifier: E4:A5:43:B4:C3:5B:21:C3:D1:0F:A3:B1:93:1D:94:6E:1C:71:02:52
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 019A71B7E82C05ECE28195741C356C8031E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: qqWZhF4Ao756Xcj1KSIN1oR75DwY+IULjvM6LwaONFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e8:2c:05:ec:e2:81:95:74:1c:35:6c:80:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=e4a543b4c35b21c3d10fa3b1931d946e1c710252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:f8:52:b3:50:13:6b:0c:93:78:50:8c:d6:
8e:1c:32:05:4f:50:6f:c0:54:22:e5:0f:73:f0:e7:
a5:0d:d0:ba:56:73:c2:9f:9b:0d:b7:02:03:a7:13:
84:20:14:27:e4:14:05:b9:67:12:d5:d8:bf:e4:2e:
e5:4e:4c:8b:f0:8a:15:e9:ed:26:37:eb:14:7e:e3:
e9:fd:71:7b:44:3e:81:c3:af:f3:96:9b:fc:7e:ac:
56:33:4b:f9:7e:86:35:ba:ff:2a:70:8a:3e:fc:06:
de:98:b4:4d:3b:a5:cc:b9:51:fc:37:90:d0:b2:b8:
a5:4a:3f:f4:da:42:45:46:6d:dc:8e:cf:b9:8a:96:
cf:c6:e6:54:61:6e:82:3b:7d:a1:04:03:84:ab:34:
f6:20:c5:cf:67:91:1d:b3:8b:3d:22:b5:ad:1c:d9:
69:e2:c2:fd:98:75:c0:b8:ac:53:f9:39:3c:03:65:
a4:9d:bf:23:bf:c3:e0:5e:ff:65:d3:b8:f4:aa:fa:
45:47:60:8a:76:c5:09:5b:91:89:86:27:c2:a0:d2:
00:be:62:5e:6a:08:90:a8:eb:c1:20:0a:83:26:e3:
96:ed:12:94:40:f4:8e:a4:45:35:a6:f3:97:74:01:
2c:2f:42:98:9f:5e:2b:71:ec:7b:60:dd:38:43:d8:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:43:B4:C3:5B:21:C3:D1:0F:A3:B1:93:1D:94:6E:1C:71:02:52
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c5:6f:eb:88:d9:9e:1f:e8:16:14:fd:7e:75:af:f8:ad:d1:
9c:ea:f7:00:2c:20:83:4a:46:d2:c4:63:46:7b:44:aa:7d:0b:
15:10:1e:38:a6:04:13:ca:61:d5:0c:fb:4a:4a:71:06:96:a0:
a8:fd:23:fc:e6:4e:8f:79:53:a4:b7:9e:01:6a:18:ff:88:db:
90:2c:ca:db:bf:7b:0c:6d:20:d2:43:cb:07:be:77:24:7b:74:
bd:d6:ce:3b:01:f2:d6:d6:25:45:82:d0:d4:d5:4a:92:06:a6:
87:2f:3e:3b:d3:36:08:f3:15:c6:fa:8e:78:c5:2f:56:3a:c0:
ed:c1:69:ee:23:9c:7d:86:7b:9d:d7:ef:13:ad:95:89:e6:49:
28:f0:70:18:ec:1b:4a:c1:c5:a0:f0:03:e1:c5:1d:ec:63:97:
f8:8e:2b:b7:8e:15:4f:7a:c2:bc:39:cc:4e:4c:00:1e:55:71:
b5:1e:d9:a3:89:4f:2f:e6:09:e6:13:67:ad:bf:22:9f:be:1f:
8a:2f:1f:38:dc:9f:ae:60:cb:95:06:a5:10:65:c0:09:3d:f3:
a8:27:c8:b5:3a:3c:a7:1b:ce:76:7a:e0:2f:89:96:b8:d7:ee:
a3:b4:f8:1d:da:0e:fa:6a:de:2f:ed:ba:7a:e6:94:9d:c2:d2:
52:3c:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:19 2025 by rpki-client