
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: k5vEYhI8umdRDjiUqcBFA5k98AdOmN+mTic3/FHISQM=
Subject key identifier: 5C:CB:1C:D8:6C:94:84:98:7A:10:DB:83:4E:9A:08:4C:35:85:92:13
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019921B1022747AE5D016D265BEDC0462B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 101E
Signing time: Sun 07 Sep 2025 01:01:12 +0000
Manifest this update: Sun 07 Sep 2025 01:01:12 +0000
Manifest next update: Mon 08 Sep 2025 01:01:12 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: MrOIndepNbQ0R8g6PoDyEuxN9ZNDNWpxhPChYEUKfvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:02:27:47:ae:5d:01:6d:26:5b:ed:c0:46:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Sep 7 01:01:12 2025 GMT
Not After : Sep 8 01:01:12 2025 GMT
Subject: CN=5ccb1cd86c9484987a10db834e9a084c35859213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:ba:15:38:94:a9:55:30:19:05:8f:00:2b:
79:35:df:08:87:ab:f9:3d:f0:a9:cd:cb:8c:37:c7:
77:07:59:d7:54:a7:da:56:59:83:5b:61:f7:78:db:
dd:95:48:32:f0:b2:95:92:cd:2e:2d:e7:9f:d6:83:
7c:dc:c0:06:87:dd:aa:81:f0:ec:77:83:fe:97:24:
89:54:e3:d8:35:27:19:ee:81:c9:98:5d:99:55:09:
0c:25:43:dd:e0:c6:3e:87:3a:3f:7f:66:cc:ab:a6:
f5:c6:32:00:2a:f4:e8:b0:9a:07:4d:c1:64:5d:75:
58:c1:34:b1:88:f7:3b:2c:dc:ad:00:fd:25:65:f8:
f9:d5:d1:34:93:b1:d3:cf:dd:9f:6a:80:ad:6a:93:
7b:3e:ca:89:13:28:1d:6b:06:eb:da:31:6e:f9:64:
dd:13:85:9a:79:6a:44:52:1d:4a:ba:6f:a9:54:1e:
71:78:6a:55:cb:97:52:9f:0e:48:90:2e:12:38:5f:
3c:88:14:3d:a1:5a:04:c3:18:ca:71:c0:ff:ae:a3:
65:66:65:43:23:a5:df:45:ae:15:6e:fa:8b:25:a8:
18:6e:63:e3:02:90:88:6a:61:1c:a2:e0:a3:3a:61:
e0:22:9c:bd:32:99:5a:67:91:a4:72:02:f8:b3:91:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:1C:D8:6C:94:84:98:7A:10:DB:83:4E:9A:08:4C:35:85:92:13
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:a1:1f:dc:c3:f9:37:b0:1f:1d:fa:50:18:0e:1e:9c:3e:
a6:d2:8f:44:b8:eb:ce:76:06:3a:95:f2:10:be:30:3f:96:6a:
73:96:b7:53:81:24:8f:22:34:86:2e:7d:38:8a:66:81:f1:78:
56:7a:f8:9d:a1:2e:f1:fc:23:c6:e9:ef:ad:1b:73:2f:3d:ba:
46:33:e3:f4:58:da:c2:92:04:2c:c4:f5:a8:51:4d:26:f9:9f:
fc:86:d3:90:ae:bf:5d:32:13:d2:27:d1:a1:c8:8c:31:55:0f:
5e:6d:65:d5:31:3f:9d:03:41:da:12:3a:5b:21:68:20:32:57:
ad:6e:18:3c:59:d9:1e:ae:9f:52:aa:d0:31:e2:ce:ea:43:ff:
4a:e1:74:cd:07:c0:5d:c0:51:77:ef:a9:f9:7b:a2:47:ca:f1:
47:c9:91:d5:57:c2:7b:e2:bb:93:c0:cf:ce:7e:1e:97:6a:03:
fa:56:8a:41:26:71:02:31:6b:e0:36:c0:d2:a6:1b:78:a9:b7:
c3:8c:b8:32:c9:05:7e:d9:04:e2:cb:cb:b4:ee:f4:e0:e7:3b:
bf:7d:a8:65:a6:d3:62:f5:ed:fd:7b:39:d9:53:bc:58:71:3c:
90:e1:42:5d:42:bd:1c:09:b0:f1:de:26:91:ba:5e:2c:ec:0d:
d1:70:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:07 2025 by rpki-client