Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier: avrdOGOWps0QUMYpO6Zkkhy+Yoj0bI5UqXNjSONjXnM=
Subject key identifier: 1D:9A:3C:BE:DB:48:1F:C1:C0:D2:33:E3:FA:4D:14:80:F5:8E:5D:E2
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial: 019A7225C379C56A7E6E75919F741953B1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number: 0773
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: ZynVGx1aGpNT+rHR+g8zghNfp00EN976cnMSNgXIzR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:79:c5:6a:7e:6e:75:91:9f:74:19:53:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=1d9a3cbedb481fc1c0d233e3fa4d1480f58e5de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:77:25:07:44:d6:c1:cd:a6:36:40:9f:34:
1d:1e:59:e3:11:34:ac:24:a2:2c:07:3f:3d:03:43:
58:9e:77:b8:ef:e5:05:a6:36:19:8c:b0:23:13:99:
0b:47:34:23:31:9f:fc:c3:ca:f9:75:98:02:be:de:
ad:d3:52:85:8d:84:27:2a:1b:f2:b5:67:f6:de:9d:
df:85:2f:be:c9:f6:c1:13:c0:cd:65:56:90:08:ba:
bc:1e:4e:f9:48:e5:b6:d7:97:e9:dd:e7:a9:a1:97:
f1:26:97:fa:f4:d7:7b:1b:95:23:7e:1d:1a:da:20:
4b:ac:6a:5b:4d:db:62:5d:dc:f8:11:96:d3:0d:6e:
ae:10:8d:f2:5c:7e:2a:7f:78:38:ca:2e:b5:d9:1c:
d0:a5:8e:42:29:4a:cd:6a:1d:9f:53:9d:80:b1:47:
10:8b:b1:f7:72:9b:5d:34:cb:11:55:dd:f6:47:30:
ca:35:0b:7a:fa:33:1c:05:37:49:f4:9f:0a:e9:df:
b5:51:cb:99:dc:fe:c5:21:88:b8:e5:26:86:81:52:
a8:b0:1d:5c:a6:3d:57:5e:3a:d5:f6:38:a1:db:a3:
59:23:c6:74:0e:f8:dc:bc:c8:c2:60:aa:9d:11:ae:
6c:8e:a1:dc:22:66:8f:bc:0d:be:a8:c6:3a:a7:82:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:3C:BE:DB:48:1F:C1:C0:D2:33:E3:FA:4D:14:80:F5:8E:5D:E2
X509v3 Authority Key Identifier:
keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:15:1f:9b:4e:4a:49:a9:48:43:23:59:e3:b3:77:2c:a8:
f1:19:6f:04:16:e9:8b:98:d3:36:6e:63:49:ca:97:5e:8c:13:
b7:ea:d4:98:be:16:8a:bf:9c:1c:fc:d0:30:e3:fe:e3:c8:70:
73:e2:13:8a:1a:1c:a8:0c:5f:16:da:e5:56:fc:5c:6b:2a:a5:
59:b1:fa:42:5b:e8:ad:9b:25:8c:91:05:b0:bf:44:8e:be:2f:
93:cc:2d:a3:80:b1:b0:cd:22:31:f7:6f:80:ab:d8:b4:93:e1:
b3:97:21:6d:49:c4:6f:55:97:e5:74:f1:85:55:67:86:14:81:
24:93:c9:8e:8c:f9:d2:40:7c:f0:70:dc:92:ba:90:35:6c:55:
13:13:52:dd:63:32:7b:c9:0f:c6:49:50:4e:01:d8:ac:75:61:
76:91:12:bb:5f:fa:c8:90:f0:a6:88:04:f9:ee:9f:e5:47:6a:
77:43:d9:20:95:be:24:2c:a8:a8:24:e1:eb:8b:96:9a:00:92:
62:4a:0f:08:40:d3:2e:54:10:e6:be:90:9d:54:35:4a:b7:2c:
4f:48:68:00:60:27:e0:ec:03:7a:2b:3d:2d:85:21:39:24:e1:
7a:b8:7c:49:0a:c6:2d:e8:54:0c:82:71:35:d0:22:0c:9a:a2:
27:9f:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:16 2025 by rpki-client