Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier: 2hA8OvNoAFLg7G4D0pxRySeE8WE2bFl/lBu8GAePnyg=
Subject key identifier: A9:32:4B:DF:89:D0:2D:18:BB:B0:24:EA:6D:2A:BA:CF:26:F3:EA:D0
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial: 0199FC58CE205278DE7C71EB44BAA3651E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number: 0736
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: dGGJr6ky4UD5ViwN4YaDqts4c5LTfuUSWGP33irNy34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ce:20:52:78:de:7c:71:eb:44:ba:a3:65:1e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=a9324bdf89d02d18bbb024ea6d2abacf26f3ead0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:50:7b:57:37:ca:58:98:13:84:2e:7f:8b:
e6:db:55:90:7a:cc:be:b3:ec:3b:7b:0b:30:ec:34:
78:10:fb:7a:4f:02:ea:46:4a:bb:47:29:76:2c:c4:
a0:76:f4:11:b4:e5:e4:38:e1:1e:b4:d8:45:3b:c1:
d2:3b:20:41:4c:78:93:40:f6:be:9f:54:72:02:71:
a4:46:fe:ea:0e:97:16:30:e9:c2:c7:04:84:fe:b1:
bd:ee:41:54:e3:ad:bc:e7:57:c3:c1:91:53:80:97:
78:72:36:99:aa:08:f4:e5:42:c1:32:83:03:c5:f9:
56:11:ed:68:e4:eb:b2:cb:c2:bf:99:4f:25:01:01:
c2:d8:8f:ad:03:bf:a6:4c:ae:86:44:47:04:e3:99:
6e:d4:cc:83:09:30:3b:33:a0:19:34:2d:41:dc:e0:
6c:d2:20:c0:7a:e9:be:a2:eb:0d:c5:a6:26:72:72:
e5:e4:d9:19:9f:05:50:dc:38:94:68:19:2f:ef:2d:
43:8c:cb:6d:bb:df:4d:a4:81:4f:cb:0a:cf:05:66:
78:93:c9:80:75:84:5a:0d:d1:bc:a1:c0:02:a9:1c:
b6:35:aa:fa:23:3e:ee:7c:e7:08:f4:aa:51:76:76:
c6:17:bf:5a:e3:3f:3f:94:b2:6f:91:a8:84:3f:63:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:4B:DF:89:D0:2D:18:BB:B0:24:EA:6D:2A:BA:CF:26:F3:EA:D0
X509v3 Authority Key Identifier:
keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:88:fc:a5:52:c8:cb:bc:04:dd:76:78:e6:84:19:ce:7a:d9:
2a:a5:d9:13:9e:fb:d3:9d:30:8e:ee:85:fc:46:dd:74:13:78:
d7:fc:7a:3f:86:20:97:1d:1c:d0:35:77:55:18:23:63:d9:95:
86:7c:30:4e:7b:9d:21:d8:4c:77:7b:1c:4d:b6:b0:1c:3b:1e:
2d:3b:91:88:91:b9:67:d3:59:c5:3b:b1:d4:45:df:80:f1:13:
3d:fa:af:d6:66:ea:20:ec:5b:2d:24:3e:82:3a:f8:7f:c1:01:
ba:6b:e2:a8:8a:97:ec:a3:28:8f:5e:29:db:75:01:fe:f7:60:
0f:d6:d9:07:9a:b6:30:c0:cb:1a:0e:bd:de:9b:28:c5:cc:84:
94:20:e6:eb:98:a9:12:74:94:fd:60:b7:dd:0d:02:f3:b1:8f:
fa:7e:5d:f3:6e:01:5c:e3:dc:e4:a5:1e:0e:aa:b5:d2:5c:b2:
0a:86:69:c8:3c:b4:d5:a4:6e:0a:eb:82:e2:c2:aa:67:69:bc:
0d:ed:72:57:16:81:ee:91:83:0f:98:1d:bd:29:9a:90:c8:06:
a9:8f:d7:39:07:df:d7:c8:19:f3:a3:60:aa:14:2c:f0:6a:69:
bd:a4:a7:69:1f:9e:fb:3a:6c:b6:00:fb:f5:f2:a3:8f:b3:6d:
de:43:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:49 2025 by rpki-client