Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
File: I-VNMniWj26JlDXq-hVwlnX20DA.mft (raw, json)
Hash identifier: jNGnVY5m90zcWcPh0pFJlIaW5dcrxxhhaQusBOVUpEU=
Subject key identifier: 84:C8:4D:BD:F6:A5:C8:5D:64:02:87:BC:17:72:76:5E:00:64:D9:EC
Authority key identifier: 23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
Certificate issuer: /CN=23e54d3278968f6e899435eafa15709675f6d030
Certificate serial: 019A725CC00B13DB276C30AB4DC2EB33A2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
Manifest number: 58
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: I-VNMniWj26JlDXq-hVwlnX20DA.crl (hash: sJwm95OBbKInjluJ5qhGIXA23M4vJ0CTiFYJY7rQY9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c0:0b:13:db:27:6c:30:ab:4d:c2:eb:33:a2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e54d3278968f6e899435eafa15709675f6d030
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=84c84dbdf6a5c85d640287bc1772765e0064d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:fd:2c:f8:82:03:67:e1:72:5f:c8:a0:e0:
6e:82:3f:d9:70:9d:5f:19:dc:14:46:bc:3f:c4:6e:
91:b1:08:9d:a7:ba:31:a7:23:f0:05:6f:99:b4:ab:
88:6c:aa:98:9a:a6:c2:58:86:b4:6e:3a:d9:73:12:
d2:7d:f9:8c:c4:7b:44:40:97:57:14:b2:67:fa:05:
5d:14:c4:16:1e:70:a6:fc:de:b7:2c:95:38:4b:d5:
2e:e0:ee:e3:8a:be:43:1f:1c:73:78:8a:bc:02:d9:
ff:b1:bb:6b:67:c1:65:02:53:8c:55:76:49:db:5c:
46:3e:5e:69:69:25:65:56:63:a5:5a:8e:d1:b6:96:
69:30:77:86:cd:03:43:b4:39:9c:f5:c6:a6:8b:ab:
6c:20:52:d8:8b:dc:5f:dc:9c:08:7a:96:fb:cb:d6:
8b:3a:85:23:28:d2:bd:4a:a5:c2:39:84:a5:5e:96:
3c:1a:85:45:9d:ff:02:bb:d8:9a:3d:71:2f:58:cf:
1c:6e:ac:fc:72:b4:56:1c:75:ea:45:ee:46:f2:a4:
a2:08:7e:32:1c:fc:6e:c8:4d:09:d5:0f:5c:4c:4a:
e2:3d:77:fc:d3:12:3a:fa:eb:80:f2:3e:39:3f:10:
9b:47:cb:0b:95:9d:7d:e7:46:d3:d7:51:6e:83:79:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:4D:BD:F6:A5:C8:5D:64:02:87:BC:17:72:76:5E:00:64:D9:EC
X509v3 Authority Key Identifier:
keyid:23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:11:24:17:71:ab:dd:72:15:63:9e:0b:24:67:42:52:47:fc:
c6:d5:63:7a:4d:42:35:06:61:89:3c:31:62:b9:66:3e:f5:ec:
4e:64:45:6c:11:2e:84:e9:87:94:2d:04:98:ea:c9:bb:86:eb:
08:90:d3:fd:0c:e3:88:d7:3f:51:dd:16:0c:a0:d6:23:b8:7d:
be:3b:09:b4:76:40:0f:e4:09:10:d3:09:1d:d5:e2:08:81:ae:
f4:20:e5:31:cc:20:80:48:8f:3e:46:b2:29:80:f4:01:80:55:
e9:01:0a:28:01:c1:fb:51:5d:bc:41:60:ae:12:e0:92:1a:ce:
2f:05:26:01:b5:c3:4c:6d:1a:54:24:72:58:4b:e4:45:46:a4:
22:dd:e8:0b:2c:0c:31:8c:54:20:62:3b:95:62:0d:be:c8:29:
15:2b:68:67:f3:8b:78:16:65:12:45:1b:d8:68:21:1d:9c:f5:
d7:63:3e:dd:8c:40:1b:4f:6d:01:f3:f4:78:21:8b:cd:39:b4:
81:bd:d2:95:44:2e:f5:f4:99:7c:dc:fa:60:96:cb:66:a9:c2:
a8:d5:85:3b:15:cd:c8:af:d7:3e:71:74:ce:06:64:25:cb:c7:
d9:34:57:df:a9:5f:54:ba:92:86:45:b4:64:d7:0c:59:51:13:
61:0f:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:34 2025 by rpki-client