Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: RIRlZsNqqL/3P0WVSouyZZEZzMhA3vKrFXnbfiBDS38=
Subject key identifier: 94:40:24:CC:53:CE:FC:AD:63:9F:3D:14:B6:0B:12:6D:27:71:A8:4D
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 019921B12C1371450849B7166994B9564D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:01:23 +0000
Manifest this update: Sun 07 Sep 2025 01:01:23 +0000
Manifest next update: Mon 08 Sep 2025 01:01:23 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: vgHApNJ2bgIFsjktPcOLUzFOJapnwoOzZxwmE8tJaMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:2c:13:71:45:08:49:b7:16:69:94:b9:56:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Sep 7 01:01:23 2025 GMT
Not After : Sep 8 01:01:23 2025 GMT
Subject: CN=944024cc53cefcad639f3d14b60b126d2771a84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:cd:75:e9:2f:c3:97:fb:8c:e3:fd:ba:a3:
90:9b:88:c5:05:a9:0a:07:00:4e:a4:e8:86:57:65:
1e:af:b2:b6:ee:92:de:5f:79:0c:05:05:f1:59:c1:
9d:05:53:81:33:21:8b:a1:25:45:44:be:ef:8a:82:
8e:c5:dc:65:bf:71:f9:4d:7f:ca:ed:c2:f1:09:49:
cc:8c:2d:99:bf:71:33:cf:16:aa:26:f0:10:80:0d:
52:5d:9b:9b:ed:bf:d7:78:4b:87:e3:86:77:82:09:
32:89:dc:3e:32:ce:34:ba:45:42:e4:f2:ce:20:bd:
9f:56:f1:8d:d3:6b:6a:8b:05:03:fb:75:20:a1:85:
1e:62:be:ad:c0:69:8b:10:ad:6b:0e:b5:09:cd:ee:
e6:66:6d:88:c5:bd:a5:86:09:68:94:6f:c3:d6:70:
98:c8:46:1c:26:89:71:87:24:11:64:3b:f2:9c:31:
74:0e:12:29:82:d7:51:c3:e7:3c:d7:79:fd:fc:86:
9f:5e:3e:0e:4f:b6:b3:14:ff:4c:1c:72:ce:97:a3:
fa:72:0a:6d:42:1a:28:46:b2:6c:a8:9c:0b:41:f1:
22:31:6c:63:dc:9f:f0:9a:c8:96:2a:aa:0e:cf:47:
ca:d6:68:83:9f:17:de:dc:01:73:54:37:05:c5:e6:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:24:CC:53:CE:FC:AD:63:9F:3D:14:B6:0B:12:6D:27:71:A8:4D
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a9:60:d4:0b:33:56:08:9f:33:34:f3:79:d2:d8:ab:d1:d5:
d7:68:eb:ad:a0:9e:51:af:dc:b2:7b:af:34:06:f5:2f:4f:1d:
6e:9b:11:6e:84:7f:07:9e:19:a3:80:2d:e9:fa:f8:b2:80:5a:
75:27:46:fa:50:a2:94:e7:5f:0b:b8:0d:cb:b4:da:b1:fa:17:
cd:7e:4c:05:aa:1b:51:7b:bc:45:d1:4e:db:73:57:dd:d1:0b:
89:14:a7:42:47:5a:eb:c3:8c:34:ef:10:1d:c7:cd:e8:74:96:
8f:58:46:e3:58:72:ea:87:06:fe:14:c2:7d:a1:39:a7:8b:10:
92:5b:5e:ec:0e:93:f8:71:41:52:cd:e2:91:c3:ce:b8:94:36:
02:93:79:63:ad:f7:12:eb:7b:29:3d:f8:e1:55:a2:7f:ab:80:
de:c1:6c:9b:d0:66:82:fa:4d:ba:a1:bc:51:55:08:f0:02:6e:
ae:2b:68:d8:ce:26:ef:00:97:bf:ce:5c:f3:f9:48:ff:70:9c:
ed:99:af:d8:e8:9a:e3:fd:ce:15:2d:f0:ef:d6:60:57:df:a1:
7f:86:98:71:19:6e:fb:4c:fd:d7:21:5e:e0:62:08:73:9e:99:
60:2f:5b:a8:0f:0f:c0:6a:ed:5b:37:d7:9d:09:e1:95:a6:de:
37:30:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:34 2025 by rpki-client