Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: oYXbSnHS3iyd7QLJZT9C6yZGCasRnG3qjKrC5SYrGRc=
Subject key identifier: 2A:87:33:A3:1D:DB:5E:01:5E:F9:F8:BE:99:CB:BF:99:E9:23:FB:83
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 0199FBEBFB6A2D52AD4473DF1382A140726D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 07AE
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: FVD3qXXwn4+jTG8ws8qvGuNA0gEkqgXXI2uHTGtseJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:6a:2d:52:ad:44:73:df:13:82:a1:40:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=2a8733a31ddb5e015ef9f8be99cbbf99e923fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:d5:3e:93:cc:28:37:ea:2d:bc:e0:d1:19:
17:52:52:c9:43:09:99:d6:f4:e5:61:a9:6a:c3:78:
c9:bc:95:c5:f4:5f:31:da:02:bb:d1:44:30:d9:c5:
21:8f:f2:f8:4e:a9:26:3d:25:eb:8f:45:5a:de:4a:
8b:7f:33:8d:75:b4:a3:cf:76:cd:de:34:f3:28:62:
f5:45:f9:53:9f:b7:93:7e:38:78:e9:f5:28:9c:8e:
11:70:87:6c:d9:16:f5:31:a5:2c:eb:33:ca:de:44:
77:80:c2:30:29:49:9d:67:c1:3e:67:1a:ab:90:54:
06:51:b4:95:98:42:f6:c2:90:06:c2:6d:d2:17:2f:
ab:c4:13:33:95:cb:b8:26:e1:44:40:99:68:4a:e9:
ce:5b:c5:6b:b0:33:4b:2b:b8:b7:91:1e:6a:8d:6a:
94:80:c6:4f:bc:4b:00:0f:ab:1a:d2:54:78:ff:7f:
ae:bb:31:d5:53:ba:87:38:17:4c:83:2d:96:8b:72:
df:c7:2c:8b:57:a7:e6:a2:98:92:0c:ec:27:61:77:
ff:2a:2e:02:a9:19:41:91:70:9b:b3:24:78:bd:fe:
c8:d7:a0:b6:fd:6b:2b:5e:1a:1b:04:66:7d:73:4e:
5b:48:22:50:5b:ef:5e:e2:71:e1:ed:7a:a4:8b:de:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:33:A3:1D:DB:5E:01:5E:F9:F8:BE:99:CB:BF:99:E9:23:FB:83
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7e:1a:fc:44:53:a0:aa:cf:11:5e:70:22:68:6a:3b:25:2d:
2c:43:e0:a6:d0:a0:2b:92:53:b3:03:7d:13:74:14:ce:6d:10:
85:33:5b:75:37:21:49:a1:7e:1a:19:94:77:b8:18:2c:67:b2:
d7:06:9c:bc:8d:cd:f9:0f:d2:5b:57:38:b3:1a:ba:25:3e:10:
19:b0:b6:5e:35:6f:a6:14:48:b6:f1:1c:69:22:88:84:b6:d4:
b0:91:0b:f7:6e:32:ec:0a:89:92:d1:a8:fe:69:dc:e0:2a:94:
6a:a0:8c:3d:73:47:30:8d:8f:4f:0f:9a:15:2c:29:d0:dd:09:
4f:4e:97:b8:f7:0f:e1:f3:bc:95:cb:74:2d:9d:4c:01:25:11:
92:f7:61:09:e9:d9:78:b3:01:2c:c8:a6:6c:77:3d:b5:e4:79:
2c:72:24:1f:6b:a2:37:f1:9d:ad:5d:6c:89:5e:85:35:56:e2:
17:75:28:38:ce:6d:fe:a4:65:6e:0c:15:81:a4:5a:24:8f:e9:
48:95:c9:54:f5:b2:33:09:33:4a:61:b5:d4:77:c2:71:63:26:
47:d9:fa:e0:36:e4:b1:c2:6b:a0:18:27:ae:d8:9d:3c:b6:2a:
11:19:6e:07:6d:53:7e:f9:f2:a3:a6:86:e0:de:ee:da:f3:ac:
ac:00:a8:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/tqLVKtRHPfE4KhQHJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NWZmMTMxMTI0YmRkMjZhMWNkMGE2Y2M3Zjk2ODU0ZDgz
MDM2MGUwHhcNMjUxMDE5MTAwMjUwWhcNMjUxMDIwMTAwMjUwWjAzMTEwLwYDVQQD
EygyYTg3MzNhMzFkZGI1ZTAxNWVmOWY4YmU5OWNiYmY5OWU5MjNmYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljVPpPMKDfqLbzg0RkXUlLJQwmZ
1vTlYalqw3jJvJXF9F8x2gK70UQw2cUhj/L4TqkmPSXrj0Va3kqLfzONdbSjz3bN
3jTzKGL1RflTn7eTfjh46fUonI4RcIds2Rb1MaUs6zPK3kR3gMIwKUmdZ8E+Zxqr
kFQGUbSVmEL2wpAGwm3SFy+rxBMzlcu4JuFEQJloSunOW8VrsDNLK7i3kR5qjWqU
gMZPvEsAD6sa0lR4/3+uuzHVU7qHOBdMgy2Wi3LfxyyLV6fmopiSDOwnYXf/Ki4C
qRlBkXCbsyR4vf7I16C2/WsrXhobBGZ9c05bSCJQW+9e4nHh7Xqki97bewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqHM6Md214BXvn4vpnLv5npI/uDMB8GA1UdIwQY
MBaAFFZf8TESS90moc0KbMf5aFTYMDYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxfeE1SSkwzU2FoelFwc3hfbG9WTmd3Tmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jZmVhMDgtMDM5YS00NmQ2LWFjYzAt
NTllODgxMjgxZDE1LzEvVmxfeE1SSkwzU2FoelFwc3hfbG9WTmd3Tmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jZmVhMDgtMDM5YS00NmQ2LWFjYzAtNTllODgxMjgxZDE1
LzEvVmxfeE1SSkwzU2FoelFwc3hfbG9WTmd3Tmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiX4a/ERT
oKrPEV5wImhqOyUtLEPgptCgK5JTswN9E3QUzm0QhTNbdTchSaF+GhmUd7gYLGey
1wacvI3N+Q/SW1c4sxq6JT4QGbC2XjVvphRItvEcaSKIhLbUsJEL924y7AqJktGo
/mnc4CqUaqCMPXNHMI2PTw+aFSwp0N0JT06XuPcP4fO8lct0LZ1MASURkvdhCenZ
eLMBLMimbHc9teR5LHIkH2uiN/GdrV1siV6FNVbiF3UoOM5t/qRlbgwVgaRaJI/p
SJXJVPWyMwkzSmG11HfCcWMmR9n64DbkscJroBgnrtidPLYqERluB21Tfvnyo6aG
4N7u2vOsrACopw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:38 2025 by rpki-client