Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: Mtu4GoOP7PcigzPXi22GUdtnwjyda3lXDd2u80zxrag=
Subject key identifier: FF:B7:AB:15:71:B0:D4:E2:62:C8:FD:31:97:0F:78:3A:8E:7A:CF:2A
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 0199FBEB7622A40B8B56233AAFBFC78200ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0EA9
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: w+s53/DjWkrltifpxG0DvT7IDfqOlDbB3VirRogm8nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:76:22:a4:0b:8b:56:23:3a:af:bf:c7:82:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=ffb7ab1571b0d4e262c8fd31970f783a8e7acf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:b4:e2:20:13:b4:7e:ab:7f:d4:b8:21:aa:
de:56:60:87:a9:ef:3f:cb:f3:c2:8b:40:b0:8f:77:
cb:e8:e1:4a:bb:ee:10:77:5e:61:c9:d7:f0:0a:df:
b6:0b:d6:de:d6:df:97:d2:de:01:e4:6e:35:fb:4f:
cd:38:a8:5d:12:ac:ce:0c:c8:4b:8e:85:80:09:44:
00:8a:8c:8f:91:2c:1e:48:6d:c5:dc:55:83:3c:21:
99:30:39:52:57:5c:70:48:97:18:7f:6b:67:45:2a:
fd:7a:31:a0:fb:b9:9b:6f:a5:94:60:78:3a:4e:cb:
51:d8:a8:68:79:bf:b0:b6:ef:f2:c8:db:2d:71:0a:
d6:83:e1:c4:70:d8:26:92:cf:05:40:11:f4:bb:c3:
97:81:6c:02:ca:2b:87:9b:0e:7a:19:35:87:02:bf:
d7:4a:b8:33:79:e7:51:d8:51:bf:cb:48:af:8d:ca:
8e:55:0d:b8:d9:07:36:ca:3d:02:07:d5:b5:96:f1:
b7:1e:23:d6:a6:17:71:40:63:1f:d3:d9:c7:9e:2b:
8d:a2:78:db:be:1e:c1:b3:a8:cf:f9:49:4f:07:91:
30:e3:6e:53:a5:11:bb:ab:8c:09:da:da:96:37:6f:
f3:8d:a8:f8:db:08:cc:cc:fa:24:9c:76:6c:2e:36:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:AB:15:71:B0:D4:E2:62:C8:FD:31:97:0F:78:3A:8E:7A:CF:2A
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b5:20:1a:f1:a3:6e:88:4d:d8:88:b4:bc:63:fe:24:a6:de:
dd:f7:4f:46:b5:d6:a9:7a:c9:52:12:dd:d1:51:b7:a7:fb:c5:
3a:c1:d5:c5:67:4c:f7:cf:36:62:00:8a:c6:32:12:1b:ab:e6:
55:73:13:2a:91:ea:27:30:e1:1b:9e:b4:e2:e5:e8:d1:73:d2:
e5:f6:d8:73:ae:b4:36:ed:39:25:e1:d8:ca:1f:cc:68:1f:73:
90:75:99:0d:6b:38:8b:47:0a:0d:64:cb:4b:8b:2d:0c:5f:f7:
bf:a7:b9:a0:63:ff:80:06:10:ae:0e:37:f3:66:f7:ac:a3:89:
90:e4:2f:3f:77:d1:10:4f:75:14:ab:32:b5:28:82:3a:7e:c0:
d4:13:f3:a5:cd:b2:47:a6:cf:fa:8f:e1:83:47:62:85:59:69:
59:57:6c:e1:59:69:72:ee:ac:35:47:70:57:ec:17:3f:8d:05:
67:30:c0:cc:73:e2:b7:93:68:fa:a1:e3:70:84:2c:93:c8:02:
7b:58:f3:22:e1:70:f6:d1:97:36:ea:1f:81:81:69:7b:df:5b:
26:6c:73:72:4a:5d:b1:cf:0a:51:db:7c:19:cd:e8:2e:6d:f6:
6d:ef:f7:ac:a5:b2:98:04:2d:8f:37:30:0c:17:6c:fc:5e:7d:
d8:cb:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:44 2025 by rpki-client