Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: u6xNp5nLNGDNyDTVvM1eYlmr5i/fhn+j0xyZsIFasJ8=
Subject key identifier: 64:77:05:79:51:F6:34:F9:41:2E:74:2B:D1:72:29:B4:A3:D9:F6:9C
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 0199FDDA3F11FC10FA42F0A62641702EE572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0AB8
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: 7JT2VRnnNGoNMlZsBr4bH+x5zCuCfHcWxJrizXQMC7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3f:11:fc:10:fa:42:f0:a6:26:41:70:2e:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=6477057951f634f9412e742bd17229b4a3d9f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:f8:23:67:37:e1:47:39:67:0d:97:10:55:
ce:02:0b:23:e8:47:1e:00:08:df:9e:56:30:90:65:
5c:ab:bc:6c:8c:11:2e:29:0f:ec:ab:cf:93:d0:a8:
ef:ce:69:d7:c5:13:1a:3c:be:f1:12:44:6f:f8:51:
5f:27:1b:46:6f:54:a4:72:6f:df:19:b4:e7:8b:ab:
00:cf:ad:1f:5b:4b:fd:21:9f:8b:b2:b2:62:9a:07:
4f:48:38:3f:14:c9:4f:7b:3f:50:71:b3:d0:d8:93:
f5:13:c8:e9:00:02:c4:96:55:bd:28:dd:b1:51:d5:
b4:d8:05:95:06:e5:50:56:5a:8a:ab:f8:c7:21:c4:
fb:53:76:44:29:c3:f9:f4:e6:2c:45:00:7a:9b:be:
b9:bf:d7:17:ed:f7:1a:73:ab:c4:5c:ba:2e:22:53:
2c:0d:9a:ca:f1:ae:58:00:c4:d6:06:bc:68:5f:c7:
b0:a3:f9:c7:b0:60:dc:95:7e:e6:15:f5:de:c5:7f:
fa:58:1c:e9:a8:34:e4:81:11:02:53:91:3e:66:c4:
8c:8d:f2:7f:23:90:34:0c:8a:33:cb:01:31:bf:05:
2e:44:68:f4:e1:28:af:f6:5b:b8:b0:7b:50:a7:2c:
be:f4:16:7b:6a:37:8a:8d:9e:c5:ac:9e:a2:96:ed:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:05:79:51:F6:34:F9:41:2E:74:2B:D1:72:29:B4:A3:D9:F6:9C
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:97:87:d2:73:02:5f:6a:cf:29:1e:b0:00:ed:e0:ec:a0:b6:
d6:bd:bd:2c:dd:5f:e6:ba:05:c0:ce:e9:eb:9c:9a:08:2b:4d:
27:88:92:81:96:5c:d3:5b:26:a0:43:17:05:33:ab:50:8e:02:
0c:39:1c:6d:1f:2b:90:00:15:38:22:a5:07:26:76:34:f4:c2:
c9:61:8d:63:51:0c:fb:7d:d6:ed:4c:64:ed:7b:c4:f3:31:29:
f8:2a:6c:c3:b9:62:63:a3:26:25:1b:bb:1e:6e:be:c0:cf:d3:
a2:36:10:9f:91:ef:f8:7a:40:9b:fe:41:e2:83:2b:2b:53:1e:
84:ea:78:75:dc:15:43:3d:7c:f7:6a:dd:f9:f0:7e:ba:34:de:
31:b6:75:23:09:f8:3c:a3:3a:68:e0:7f:c7:2a:93:49:06:d7:
3e:d6:2e:89:f7:ac:52:80:cb:32:13:9d:2c:53:27:b0:c6:5c:
ed:4c:a4:b5:31:7c:e5:e2:ce:61:8b:3c:77:4a:48:a7:ff:7d:
25:1b:04:55:bd:81:04:4c:e5:e6:34:98:74:f2:c4:f4:71:7d:
0b:03:67:e5:3b:ef:53:5d:c9:87:43:61:c3:63:d8:c0:67:38:
c2:13:60:46:9e:b8:37:41:37:a9:c3:16:d7:9a:8f:1e:73:85:
a1:da:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:10 2025 by rpki-client