Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File: VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier: qrWOy5VXymi16BD1YnAHDJRgS7SOLaWUA4MKL/G69lc=
Subject key identifier: CE:1B:B9:71:A1:F9:0B:97:AF:56:ED:09:AC:CE:75:15:91:D2:94:49
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 0199FDD8AD3BA757D4CDDAAB59FC972CEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number: 0F0D
Signing time: Sun 19 Oct 2025 19:00:59 +0000
Manifest this update: Sun 19 Oct 2025 19:00:59 +0000
Manifest next update: Mon 20 Oct 2025 19:00:59 +0000
Files and hashes: 1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: XHttw3Ar0qSIXwr4I1IYcahjAMT54JShFWAddZjPA1Q=)
2: hLQXaatH7tOfK30W86b9zuTHKXk.roa (hash: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ad:3b:a7:57:d4:cd:da:ab:59:fc:97:2c:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Oct 19 19:00:59 2025 GMT
Not After : Oct 20 19:00:59 2025 GMT
Subject: CN=ce1bb971a1f90b97af56ed09acce751591d29449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:80:61:d7:44:59:2d:24:07:98:5b:8c:45:
63:e6:a9:7b:f9:5d:92:89:02:0f:ea:14:3a:d4:21:
3c:aa:32:97:f2:68:9e:d6:8c:a8:3b:31:e1:5c:63:
51:4f:bf:0a:f0:02:83:a4:d7:fa:85:24:b2:f2:9c:
07:9a:ab:dd:b4:b1:92:31:8d:77:2b:b8:59:ca:23:
4e:85:b8:3c:eb:e8:1a:13:7f:1a:a9:76:ce:17:dc:
1d:a7:fa:05:6a:db:45:08:49:57:fd:62:8e:49:79:
04:70:e5:05:5d:d6:68:e5:23:0c:42:d5:b2:40:96:
85:b0:16:88:e0:56:a1:d8:df:a2:0a:b2:0f:39:2f:
ad:eb:da:b0:e0:48:b4:d4:38:63:9c:d1:77:49:be:
23:e2:04:fb:70:fd:c4:4b:ab:2f:ab:63:57:ec:d2:
46:b9:b3:39:cd:e2:22:56:3f:b2:62:fc:29:09:a5:
bf:2d:9d:ee:fb:f2:a3:62:41:3e:58:35:c0:29:ff:
6e:45:e1:4c:46:6e:b7:64:c7:cf:e5:b6:4e:02:e1:
b2:91:32:e7:43:ef:83:36:af:f2:52:5a:fe:fa:19:
e3:a6:2c:6c:36:0b:0b:ff:5f:3a:92:42:23:b3:f7:
b0:ab:2d:b6:a3:e7:bf:d2:7a:20:f8:5f:34:19:1a:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:B9:71:A1:F9:0B:97:AF:56:ED:09:AC:CE:75:15:91:D2:94:49
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e5:f2:a1:6a:d4:ee:2a:f6:ef:c0:20:45:ab:95:51:5c:0f:
ad:19:f7:72:af:8d:99:f8:bc:38:22:9d:60:62:81:00:aa:08:
d2:e5:cd:58:09:85:31:08:c8:06:c7:b5:ab:65:1d:d3:7f:9e:
cf:2c:68:81:5d:22:3b:21:e3:ec:b1:9f:4b:6c:15:77:a2:ea:
9e:4d:00:ed:ef:5e:dd:9e:73:80:71:5e:43:92:13:f2:bd:89:
9b:37:29:d0:83:67:c8:79:e3:00:6e:96:99:90:80:e5:8b:dd:
58:11:51:1a:32:22:93:18:54:ce:49:13:fe:83:bb:aa:cd:2a:
22:67:95:3b:47:33:a2:06:a1:ca:63:3c:bc:c5:33:bf:29:78:
e2:f6:e7:09:e7:ee:f4:a4:cd:6b:ad:ca:96:01:f6:d8:1d:8a:
3f:7d:df:c5:da:9a:68:ce:af:b2:7c:fa:05:48:9e:c5:d9:ec:
f6:d8:4f:82:36:15:c1:2f:7f:de:2d:b4:5d:e2:5e:1f:0c:b3:
fe:5a:b9:48:38:85:8b:b4:fc:a5:10:9b:6b:c8:f7:dc:fd:7a:
28:42:f1:3d:d4:bd:05:b5:8a:41:ea:53:8e:3b:aa:cf:65:4d:
cc:5a:ec:3f:9e:3b:69:8b:d9:0d:a5:03:94:b0:6e:db:7f:b5:
10:f2:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:49:32 2025 by rpki-client