Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: 92kNsk2xEauxW1v5jAOY7EhqNEHz92fqT/jl4mEkndE=
Subject key identifier: AF:70:AC:1F:DC:53:2F:93:68:65:86:4C:2E:BB:56:92:FD:9F:CE:1E
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019A71B882614A6D2FF61414A4BD523552C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: j5whE4wMEU4C1TwdVP9O1aVTnbAqM9RSv/wtbcWGqAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:82:61:4a:6d:2f:f6:14:14:a4:bd:52:35:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=af70ac1fdc532f936865864c2ebb5692fd9fce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:fc:ae:01:e4:d5:83:b6:4d:9e:e9:5e:00:
79:8b:8d:2f:8a:92:7a:4f:5d:29:44:a6:de:a5:da:
64:6a:74:a0:42:8e:a2:7a:cc:d8:67:8d:c0:04:45:
64:e1:ae:d3:2b:5c:ad:cc:56:05:8e:b4:dc:a7:8b:
6e:98:23:83:c2:ea:b5:d5:62:b8:98:16:b2:62:34:
9d:e6:09:50:26:59:ee:3b:9e:36:c8:15:c4:e2:0d:
5f:0c:a9:b0:c7:e1:5e:66:3c:65:94:c2:76:41:68:
0a:4a:fd:99:fd:b2:b9:95:44:f1:f7:84:3a:5d:b2:
18:98:dc:d6:ce:df:1c:7c:b9:62:f9:38:9d:1d:46:
36:74:6b:8b:4c:26:c1:6f:e4:79:d6:58:b9:3b:68:
e3:75:cf:09:f4:cc:5b:84:1d:53:16:0d:01:c6:d2:
99:ff:7d:af:43:9f:e0:f9:4d:f2:a6:8c:8f:24:87:
cf:86:6c:7e:7c:42:41:57:8e:03:31:8c:4f:05:91:
9c:ae:b2:02:bd:20:e3:7c:3c:59:c9:f3:bf:c7:91:
91:c8:e7:00:85:13:4a:68:77:6b:85:8a:8a:d5:46:
a8:9a:18:20:c5:58:40:62:9f:31:39:dc:d8:0b:b9:
a4:36:57:72:9c:91:5a:c1:e4:95:81:ae:a4:b7:85:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:AC:1F:DC:53:2F:93:68:65:86:4C:2E:BB:56:92:FD:9F:CE:1E
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:55:93:6c:72:c7:a5:39:66:c8:36:57:6f:9e:b1:44:ee:
35:af:19:2a:90:b5:65:91:21:63:d8:a4:64:2b:3c:00:e4:35:
43:89:da:ba:f4:9d:d9:66:18:ee:8d:ed:d4:ae:1d:fd:0c:04:
cb:77:ee:9b:26:16:d7:93:e9:84:ea:78:f8:54:50:2e:44:29:
a8:4b:b2:19:0d:4c:ee:c0:12:7d:f2:6c:96:0c:d1:8e:10:77:
1f:b1:10:58:b7:b6:33:cc:d6:aa:30:5d:ec:8b:bb:39:43:ea:
3a:24:01:cd:47:e8:3c:42:f2:7c:48:6f:eb:1a:3d:b9:91:f3:
21:76:ac:53:9a:1f:8c:31:8a:f9:a8:d7:d7:a5:cf:02:c1:5c:
c2:5e:74:05:c4:9e:4f:42:4d:15:dc:9d:84:b2:69:97:f9:01:
b9:a2:e6:e5:61:fc:6d:8b:86:68:7f:bb:88:c1:1a:f2:4c:fc:
75:83:98:82:a1:81:83:d9:74:89:ae:3c:7a:a2:b4:12:88:aa:
52:6e:da:a4:dd:2b:37:63:c5:63:a0:2c:00:70:a7:05:1f:72:
f1:2c:ac:18:9a:7c:21:8a:c5:8c:7d:4b:97:72:4c:ab:b7:d7:
65:58:9b:fe:81:a1:d8:70:27:5d:b6:28:34:06:d9:7b:3a:48:
22:53:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:24 2025 by rpki-client