
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: iveB7arPpaiS2cqQciFoA3bzT4bXZegQRlcu4Dcfuig=
Subject key identifier: EF:9C:88:E8:A4:83:FC:FA:4E:B5:3A:23:9D:8B:23:44:C0:65:AE:E7
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019924443A5F3C9D095A16F203965B88DA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 146B
Signing time: Sun 07 Sep 2025 13:01:15 +0000
Manifest this update: Sun 07 Sep 2025 13:01:15 +0000
Manifest next update: Mon 08 Sep 2025 13:01:15 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: jVsxjYHOgwYhfRosc8L6W2SKpgtcFImsjDnn7A7qrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:3a:5f:3c:9d:09:5a:16:f2:03:96:5b:88:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Sep 7 13:01:15 2025 GMT
Not After : Sep 8 13:01:15 2025 GMT
Subject: CN=ef9c88e8a483fcfa4eb53a239d8b2344c065aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a5:0b:4b:3d:74:94:e4:51:ea:d7:ad:4f:cd:
d4:60:be:54:d2:f5:89:86:76:34:62:59:85:34:11:
c2:95:b3:a1:36:c0:a8:2e:26:af:22:0c:fa:4c:29:
0d:08:86:48:3f:2a:ff:d9:ac:2e:60:e1:cd:bb:1c:
91:cf:a7:8b:1e:da:74:76:3b:6d:cb:8e:bd:1b:5c:
b2:d2:02:57:4d:7c:19:dc:65:f1:a5:5c:c1:62:95:
9f:94:72:67:35:4d:00:4b:ec:1a:c4:6b:d0:dd:63:
43:c9:45:0b:98:4a:dc:45:c3:7d:2e:6a:23:01:d6:
48:4e:7e:2a:0f:63:15:66:b1:dc:0a:83:19:2d:32:
f2:53:6c:44:59:10:41:f1:2c:48:1e:28:7a:c5:f5:
28:24:02:aa:1e:85:c1:7c:bc:dd:c4:30:cf:f1:95:
78:16:88:98:d9:f6:81:5d:17:f2:fe:0f:6e:69:c9:
17:d8:e7:9a:d1:76:9e:5e:d8:eb:8a:f2:99:ca:f5:
9f:f8:c1:46:d1:1f:9c:d4:6b:18:6f:ad:56:8f:c8:
0a:8e:58:1b:c7:48:20:18:ba:d6:23:f9:62:9e:ee:
ab:f5:e0:43:dd:06:6d:c8:fe:02:11:9f:d1:66:b6:
21:79:df:68:d8:61:91:25:0a:6b:69:57:c3:15:a9:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:88:E8:A4:83:FC:FA:4E:B5:3A:23:9D:8B:23:44:C0:65:AE:E7
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:0b:49:4b:5c:c9:1b:c0:c1:6e:8f:87:89:7a:76:e2:45:
c8:c9:97:61:59:46:e9:28:1b:17:70:74:f7:7c:8a:3b:6e:1e:
a2:de:29:6b:7b:0a:a7:36:ed:df:c3:06:7f:ff:ab:57:1e:47:
da:0a:09:b6:88:93:0a:6b:62:50:af:8a:85:8c:71:83:c1:4f:
7c:4c:22:d7:7c:2b:d6:a9:25:33:50:a2:5d:dd:7d:21:31:73:
36:b0:db:d3:87:36:b0:a1:fd:11:57:cc:e6:b7:60:2c:1f:90:
9e:49:51:f3:0c:75:e6:c9:b6:ec:7f:c3:55:3d:67:01:ff:a3:
2c:e8:26:0a:72:c5:53:15:4b:55:25:c4:be:79:bb:c2:27:4e:
51:b6:19:13:b7:9f:7e:d6:1b:19:b6:d3:ad:89:b1:66:88:70:
0d:b5:2b:b0:ea:35:d1:10:e9:68:f3:fc:f8:7f:5a:b0:64:91:
d4:cd:d7:b2:86:b3:17:16:e6:73:d2:c2:63:ab:36:df:9d:9f:
fc:a1:90:7d:fd:17:8d:5d:6a:50:b3:97:32:94:31:cb:b4:66:
18:6d:68:58:fe:7c:22:2d:da:dc:7e:43:ba:96:15:0f:ee:28:
02:77:fc:8c:98:39:58:87:ec:b6:fb:32:6b:27:89:37:e3:75:
54:79:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:38 2025 by rpki-client