Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: UkXVd7lZf9pZmVu0HEsvcDQE6pLaDYbDUDr4yJVyvKY=
Subject key identifier: 86:23:DF:9D:EC:F6:DC:C3:01:3F:4B:A9:AC:A0:12:B8:95:C4:48:D6
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019A725CA25FFEE69813B2C3E21B8A38F952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 1518
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: /cqf6euoL65hDRcUr4cqLmSLvdJQx6MhA0STdHFvtII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a2:5f:fe:e6:98:13:b2:c3:e2:1b:8a:38:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=8623df9decf6dcc3013f4ba9aca012b895c448d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:a4:e4:fb:bd:c9:28:89:0a:4b:3f:85:0a:
a8:66:6f:6e:c3:5c:5f:87:05:1b:d4:69:4b:44:69:
4a:0c:82:8a:15:89:37:d2:85:87:3a:44:30:4f:1d:
1c:6a:8c:f1:c4:7e:c9:de:e8:de:c7:4b:7c:4b:a3:
ff:51:2e:af:b1:d1:06:93:05:8d:66:62:79:2d:37:
f0:0e:51:3a:fc:f8:8a:c3:e1:29:2c:01:e7:d8:06:
6b:5b:d0:90:9d:c8:b4:29:99:92:44:5b:7c:33:5a:
08:72:3e:13:a1:00:eb:e9:d2:e5:41:70:fe:dd:5d:
60:fd:ab:7e:6c:48:81:90:c3:33:81:aa:f0:4a:05:
b4:27:37:40:bb:47:a3:c7:d6:96:b3:5b:d6:aa:b6:
de:13:fc:8d:b3:e9:7f:07:9c:ed:ba:67:37:ed:a5:
ff:5c:6f:c6:7b:38:c7:69:cc:5d:d5:4f:03:28:48:
e9:65:b1:35:26:58:03:71:b7:f5:12:ad:cb:89:5c:
e7:77:90:1b:af:82:a5:56:e6:3b:d3:6f:83:e7:4e:
93:b3:74:0b:f2:93:17:a7:c9:e7:2b:25:13:5b:ab:
3d:34:14:09:9f:0b:3a:4b:94:b6:13:13:fe:16:87:
37:59:a5:7b:f1:c6:12:47:d1:99:b5:44:a8:2e:cf:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:DF:9D:EC:F6:DC:C3:01:3F:4B:A9:AC:A0:12:B8:95:C4:48:D6
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:14:1d:07:dd:72:09:44:c3:9d:2f:d9:e2:bc:b9:1d:8f:cc:
cf:ae:7e:63:2e:67:b5:c9:42:4c:58:be:3c:11:ba:64:49:75:
b4:e5:fa:9b:ed:ce:a3:f5:06:be:30:4e:14:08:b8:f2:08:7c:
cc:14:73:54:04:68:40:8c:4a:be:4e:4a:ab:32:24:28:a8:5e:
5a:42:a4:0f:06:ad:cf:7e:e3:58:87:61:22:11:d7:f4:3b:ba:
42:5e:bf:89:1c:99:e1:62:a3:41:19:5f:60:cc:41:20:47:a1:
df:b4:28:1b:9b:d1:51:c8:41:90:14:04:60:df:31:68:67:85:
28:0e:86:94:73:31:0a:db:0b:27:48:6c:c3:c4:49:8e:2b:36:
8a:f4:fa:93:09:ff:1c:fc:15:57:9e:3a:37:59:66:46:54:8d:
8d:ba:d7:6d:e9:a9:a6:de:27:43:df:b0:83:dd:d7:52:36:22:
71:aa:bf:c1:fa:b1:de:b9:93:e4:86:d1:23:ac:e7:0d:6f:f8:
8f:fd:d5:d3:07:25:cc:2f:7d:92:40:0f:6a:3a:f8:35:ec:5e:
2d:4f:13:fd:7c:80:75:4d:90:9a:f1:e4:fb:1c:e9:b6:0f:48:
6c:d2:a7:87:3a:bc:ea:9d:c9:55:97:44:73:d1:bb:0b:d5:00:
92:df:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client