Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: wgXLzYl9z15atWPdUCZfOyr7dlPTS1exb03ov0uTGiI=
Subject key identifier: 37:A9:A6:91:2E:B4:B3:60:07:25:61:9F:04:53:BD:77:5B:3C:1D:97
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019A71B8252B26F715F87F60C05B2CA05B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 10CC
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: YOq6s85AquDjfUpmH5AVy6VwttpbOEFXgqy6BOTcgR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:2b:26:f7:15:f8:7f:60:c0:5b:2c:a0:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=37a9a6912eb4b3600725619f0453bd775b3c1d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:c4:9d:94:3d:d1:7d:24:5f:37:c6:de:9a:
4f:eb:f6:03:c3:16:9c:1e:8e:7e:f1:16:f4:9b:54:
10:ff:14:e7:4e:b0:64:60:95:42:52:10:f7:e6:94:
93:f9:36:18:4d:3c:c2:8f:68:49:8d:41:1a:9e:55:
8c:e2:0b:89:77:78:88:c8:65:f0:3a:2c:7c:e2:ba:
9c:77:47:07:dd:b8:04:c5:fe:4c:43:fc:b2:1f:8a:
49:60:cf:4a:5e:fd:88:e4:a8:4c:74:46:31:20:80:
86:2b:48:0b:89:0a:de:81:ab:d9:9b:c1:b3:b5:93:
a7:c4:3d:64:ee:46:d9:45:db:92:d9:85:c6:73:fd:
44:0d:e0:a4:b0:fe:a3:05:e1:f2:cb:d7:fb:d9:7b:
fa:be:e9:38:aa:5d:d1:f3:cc:c8:24:eb:76:26:b1:
b3:4a:5f:ea:c6:b5:49:12:0c:02:24:68:bb:f2:52:
40:43:2f:6c:8f:ec:6d:ca:a7:96:25:d9:1a:7e:5b:
c2:b7:2f:a1:d5:37:cb:5c:b0:71:bc:1a:56:aa:6a:
3e:9f:ca:56:2a:b9:9c:6f:6b:0c:13:fd:4d:18:45:
23:6f:e9:ce:11:48:ab:50:4b:65:63:ff:ae:65:a4:
39:bf:a5:60:ee:2c:35:1b:c5:06:e9:ed:2f:fc:4f:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:A6:91:2E:B4:B3:60:07:25:61:9F:04:53:BD:77:5B:3C:1D:97
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:11:2f:0c:0e:08:74:4b:c7:4b:eb:80:4c:01:91:31:0d:
80:a6:b7:be:ab:58:5b:de:67:ba:9a:81:f3:88:be:b6:37:45:
fc:46:3d:8e:a8:73:45:f0:08:d0:f5:06:3d:99:fc:cb:c7:f8:
58:e9:fc:b4:40:f6:aa:4a:47:fa:d1:71:44:0a:cd:ec:da:37:
ef:1b:af:33:43:f1:d2:67:53:c8:c1:8c:7f:53:c4:7b:0b:5f:
8c:a2:02:7c:b7:14:b3:d5:89:7c:87:f4:8b:6d:0c:f0:d2:98:
f0:90:ec:31:10:8c:35:4f:ae:6a:69:42:5f:18:97:cd:c4:14:
3a:a5:6a:b5:e0:43:fc:e8:86:a7:d1:b0:34:95:ae:32:ce:86:
81:bd:40:2f:9c:37:30:e6:92:9a:2f:5b:cc:ab:b6:7b:1a:0f:
f8:20:7c:2c:fc:96:6f:2f:d1:d5:e0:78:8c:9e:65:f0:0e:c8:
e9:84:58:cb:34:1a:b6:74:0f:b7:94:69:db:d3:8f:a0:df:94:
62:13:58:10:3d:3f:bf:1c:b4:7f:10:e5:3d:38:ab:20:bc:46:
5f:df:20:f8:9b:e3:ee:bd:02:92:55:fd:89:e0:4d:d5:45:81:
a5:4b:bc:77:77:16:f3:c9:51:28:ab:58:57:44:05:80:19:40:
f6:1a:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client