Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
File: VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json)
Hash identifier: Tn5hRzVWVTpGF2NU6AOzHJCVrwbM5PizdQvjEteGa40=
Subject key identifier: A6:0D:A9:06:7E:6A:8B:B3:F6:E0:64:DB:E0:FB:20:9C:6E:AE:59:0E
Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
Certificate issuer: /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Certificate serial: 019923314F3D0ACCD4D074AE8C71782F5D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
Manifest number: 01CA
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: lsyLSxr2c6wXyL/rKKIIjzo9hJRQZHLG9+gWhXreFpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4f:3d:0a:cc:d4:d0:74:ae:8c:71:78:2f:5d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=a60da9067e6a8bb3f6e064dbe0fb209c6eae590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:05:55:8e:2f:e8:55:8a:85:4f:af:45:c1:
ca:c8:2d:c7:6b:7a:1a:dd:b1:cb:5b:3c:4b:20:00:
a1:a7:3a:76:69:42:29:bb:a8:53:b7:8b:a6:f3:84:
79:22:8e:69:97:59:09:7b:92:47:9c:6e:3b:b3:2e:
99:7c:0b:55:ee:c0:a6:8f:10:e9:2d:d8:70:84:b9:
c0:4a:23:3b:b6:5f:f1:9d:12:71:55:82:4a:1d:c0:
84:20:92:bd:b3:33:67:f8:8e:b7:33:54:f8:3b:83:
eb:34:91:ad:2f:0a:6c:e6:dc:73:0e:e3:48:64:72:
b1:e5:65:a8:ba:58:37:ab:ea:8a:fa:79:a6:a5:f8:
14:20:f6:df:a2:e8:f2:d5:2f:77:90:ef:05:4a:f3:
e1:47:4a:c1:f4:15:dd:b5:e3:05:56:1f:d1:78:cc:
d4:15:85:f5:ea:d2:c3:fd:b3:e3:9f:59:7d:8d:2f:
b2:bf:08:44:22:a8:18:7d:f2:8c:46:13:63:86:97:
e4:a2:72:a4:35:a6:41:3f:68:17:b7:d8:6b:b6:df:
6b:dc:61:74:10:6c:a3:b9:86:b3:90:a8:bc:76:17:
57:46:e8:af:4d:48:fc:f3:29:f3:5a:38:17:f4:08:
b0:5b:75:b4:45:9d:2f:43:56:37:6c:e6:54:91:1d:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:A9:06:7E:6A:8B:B3:F6:E0:64:DB:E0:FB:20:9C:6E:AE:59:0E
X509v3 Authority Key Identifier:
keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ac:d5:3f:25:bb:b1:24:50:0f:a2:b8:49:34:68:c8:3d:33:
5f:12:fd:fe:76:9b:e6:9e:94:95:f8:fb:d5:ab:73:70:e5:44:
7f:42:5d:50:90:af:9a:07:dc:0d:00:3f:1a:4a:df:ab:b7:54:
6c:b3:88:2b:5e:05:85:75:a5:7e:fd:2e:cc:b9:3c:e9:d5:63:
e5:14:05:35:18:23:c1:df:32:b3:b1:53:16:8b:3b:f7:ea:bd:
f9:b3:c2:d1:38:c6:cb:a1:3a:4f:8f:5f:27:3c:bd:91:17:cb:
87:c2:ab:51:3c:38:d0:59:59:7f:49:76:87:45:2f:fc:7a:4f:
a2:a2:89:ca:27:02:4d:78:fd:14:65:f6:85:3b:15:09:aa:42:
c3:a9:d0:ad:fb:4a:13:2c:66:23:cd:e9:d8:cc:b8:fc:d0:4b:
92:3f:1d:bc:bd:c8:8c:57:ba:4a:05:6a:09:ce:2f:b2:5d:68:
f2:04:21:b7:98:47:8a:35:e8:47:75:1c:cd:fd:f2:1c:b6:e7:
84:58:c2:7a:cd:74:fb:b3:30:1e:50:41:7d:1c:3e:2d:46:11:
3b:3d:93:36:61:26:15:57:22:e6:ae:86:cd:a8:7b:21:c6:ef:
ac:06:86:f6:7c:0c:ec:7c:31:93:00:ce:6b:c8:17:d2:fb:75:
d0:08:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:11 2025 by rpki-client