Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier: kTjHG6C4qD6UrlnfpAT5owp61V7xaQMlamfCcDMuF8g=
Subject key identifier: DC:16:D1:F0:1E:05:32:F2:E3:FE:54:33:02:59:3D:CB:25:01:C2:64
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial: 019A72CA6641069E04A7AB01215A6DD6F484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number: 04F4
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: /SHjPciSV0oRlz0oUjlyAv1LGmqqcAF3cbkioHoBQMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:66:41:06:9e:04:a7:ab:01:21:5a:6d:d6:f4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=dc16d1f01e0532f2e3fe543302593dcb2501c264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:e1:31:7c:3f:50:ab:57:56:4d:e9:f6:a3:
0d:ef:e1:ff:97:20:78:7d:5c:17:e8:89:9e:e1:89:
24:1b:d3:ae:46:6e:55:eb:a3:28:5d:29:c8:81:c6:
98:38:ee:bd:07:e7:60:f7:f9:3e:1f:15:5e:cf:23:
a9:8d:86:1c:16:99:c0:19:ad:8c:0f:83:f3:32:d6:
cd:cb:ea:f4:91:92:92:d4:de:08:6e:6d:5e:23:08:
15:34:21:61:09:74:a7:7f:3b:6c:92:81:9f:93:37:
2b:9c:b3:3c:8f:76:37:47:84:0b:6a:d0:1b:0c:62:
9e:b3:6a:cd:71:06:0b:4b:35:86:eb:77:ee:59:51:
0e:cf:44:48:cf:02:59:5d:69:e3:08:0a:6d:cc:e2:
e5:09:bc:9d:95:87:fa:41:90:99:e1:46:3b:f4:6c:
7f:8b:70:b2:3f:1e:52:d7:8d:d8:2f:7f:f4:0f:3b:
7d:9b:9b:ec:21:fa:5f:a7:5a:a3:2a:27:ef:0c:71:
2e:c0:4a:9d:4d:dc:71:bb:9d:a7:18:e3:af:99:08:
d1:27:b1:68:3a:2b:7c:ab:22:bb:f1:95:1e:e0:bf:
6d:13:66:46:50:08:ec:93:83:0f:9a:6e:c3:7b:47:
5d:55:83:eb:25:04:b2:20:a3:2a:87:59:74:b8:90:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:D1:F0:1E:05:32:F2:E3:FE:54:33:02:59:3D:CB:25:01:C2:64
X509v3 Authority Key Identifier:
keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:68:5c:08:36:cf:f0:b4:9a:5e:ee:88:78:f6:2c:24:f7:
da:2e:a1:8d:b2:e7:60:5e:26:9d:a2:ea:c2:66:8f:a2:0a:f6:
92:24:74:e1:0a:db:d8:14:cf:dc:39:5f:95:e6:73:67:81:bf:
37:ca:54:6a:4c:9e:49:5d:e2:2a:6a:1a:a2:0e:b0:38:9d:cf:
67:7b:46:df:ba:a6:f2:c6:17:8e:97:1d:fe:46:13:46:91:92:
58:8d:79:6c:5a:54:6f:29:61:66:97:ef:67:2d:6f:02:4e:76:
cc:eb:4f:40:e0:17:d4:b0:3c:12:48:1a:cf:42:28:ae:7b:10:
59:99:84:d5:8d:ba:56:b8:7a:26:52:12:a7:33:b4:98:a3:17:
4c:cc:1b:11:c5:6f:97:fa:e8:15:80:5f:8a:e9:5b:9a:8a:67:
c0:95:a3:ee:12:2c:2c:d1:14:25:7b:c6:4a:e7:e6:78:b8:ff:
94:87:87:c2:87:6d:f7:14:c0:9c:40:66:09:bb:92:5c:e8:a7:
3b:61:b2:c3:6b:2a:a5:ab:60:ef:6f:3c:fa:46:ed:7a:c5:9b:
c6:62:35:aa:a4:68:4a:0b:e3:96:b1:56:ce:15:f4:03:d0:46:
b2:aa:a8:74:9a:da:55:84:d4:ad:5f:ff:39:13:da:1b:4e:3e:
16:05:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:26 2025 by rpki-client