Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
File: VuqlFkAibog8wIkopOAmGoAzf-I.mft (raw, json)
Hash identifier: hh+IBowVRLAomH1dbmNqJJl8xL7FMM9tJpjcTRieouI=
Subject key identifier: 75:D6:DE:F3:58:64:8C:28:8B:D9:DC:2E:12:E5:15:CD:15:81:A9:A0
Authority key identifier: 56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
Certificate issuer: /CN=56eaa51640226e883cc08928a4e0261a80337fe2
Certificate serial: 019A7225A6E974BAB0F12DB8B619588BC381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
Manifest number: 20
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: VuqlFkAibog8wIkopOAmGoAzf-I.crl (hash: NV4IMHilhmFzr3PTNc+isisID7QmKSqQMxRo7+N0L44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:e9:74:ba:b0:f1:2d:b8:b6:19:58:8b:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eaa51640226e883cc08928a4e0261a80337fe2
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=75d6def358648c288bd9dc2e12e515cd1581a9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:bd:72:f8:3f:73:6a:23:c2:89:4b:99:fe:
89:2e:f9:2d:c8:c8:cc:31:ee:f9:38:e9:d1:17:46:
78:b0:f1:11:8a:69:a1:cd:93:74:30:aa:39:ef:c0:
7a:45:20:b8:f6:81:c0:6a:50:af:47:4f:e4:8a:c9:
35:77:87:a5:73:62:0e:54:43:7a:e3:ee:d2:2a:0f:
c1:e2:a5:dd:58:58:39:e5:09:71:e5:a4:cf:f3:27:
52:6a:53:e8:b8:c8:b4:20:93:00:0e:bb:2f:45:f7:
1b:9d:d0:9c:08:8d:ac:63:5e:68:90:cb:9e:7a:d7:
6c:6c:50:59:01:16:bc:00:5f:3b:b7:42:40:1a:0d:
ad:64:18:50:20:e3:e3:a3:35:f7:21:39:9b:17:4c:
d7:68:d1:57:68:c7:cf:76:1d:e1:23:fe:37:bc:46:
8d:b5:5b:4f:14:39:49:31:fd:31:64:55:f4:51:9f:
8d:f0:af:f9:cc:6d:3b:a1:dd:8e:7c:ae:fa:70:fa:
d4:bf:a3:ec:15:fe:a7:70:e7:55:70:89:95:fa:fd:
fa:fe:7b:1f:bc:ea:c9:7f:b5:2f:62:a3:07:b8:55:
83:19:8a:38:be:80:f8:b4:17:80:4b:13:c1:08:45:
e6:4a:70:c1:00:41:f5:95:25:b7:58:5a:82:89:12:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:DE:F3:58:64:8C:28:8B:D9:DC:2E:12:E5:15:CD:15:81:A9:A0
X509v3 Authority Key Identifier:
keyid:56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:f0:ed:f9:55:41:c0:cb:a8:d0:fd:4b:ce:d6:17:67:b0:
dc:93:12:77:1c:40:52:69:dc:99:d8:e8:68:71:83:34:ee:44:
f4:38:9a:af:05:32:c0:5c:71:3d:59:b2:b4:f8:bd:71:83:5b:
d7:4c:ff:68:b0:45:41:91:39:b0:47:62:46:32:98:47:dc:5e:
f7:c9:a3:5b:38:e4:38:bb:d0:46:c4:39:47:c6:66:d2:e3:be:
b9:9c:c8:fe:8e:d2:d1:6f:69:60:3a:01:ad:c3:99:06:f5:1f:
26:e8:cc:85:1b:bf:b2:99:c6:93:0a:45:84:2c:89:06:af:1c:
1b:6c:16:f0:f9:9b:e4:ea:91:ba:14:ed:a4:b8:6f:a5:26:f8:
70:85:29:cc:0c:a3:39:70:0f:f4:38:a0:1e:3b:71:a9:0f:c8:
8a:dc:51:b8:40:80:f0:fa:43:da:cb:cc:c6:fa:69:18:58:b1:
fd:3c:e3:5d:72:63:e5:0a:da:9a:1e:0f:06:26:d5:a1:9b:3a:
27:f1:aa:42:42:ec:82:d3:71:98:c9:9d:27:01:d7:b2:19:27:
b3:4b:5d:1a:c9:ac:1c:5b:78:ec:fc:d5:23:d0:21:d9:68:51:
78:74:9a:be:b5:9b:05:ee:61:0c:ee:00:56:86:e0:94:0e:59:
b3:63:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:29 2025 by rpki-client