Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
File: VTmIsu6cEEIX3eFjmCF497TpdGc.mft (raw, json)
Hash identifier: RMrCdEY0/+p1hLsZrUPAuIwGNCtBBr9EmfMm0dmCMlM=
Subject key identifier: 59:07:2E:CF:9B:EF:01:F5:56:46:0B:62:90:E9:F4:84:52:64:C2:44
Authority key identifier: 55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
Certificate issuer: /CN=553988b2ee9c104217dde163982178f7b4e97467
Certificate serial: 019A725C6254AE29DCAE8B7B6F9E2DA61E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
Manifest number: 6C
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: VTmIsu6cEEIX3eFjmCF497TpdGc.crl (hash: gJ/OLU7EZrGcBd7yzUw2DZqHExAMgtT2LRRS7VOBOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:62:54:ae:29:dc:ae:8b:7b:6f:9e:2d:a6:1e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553988b2ee9c104217dde163982178f7b4e97467
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=59072ecf9bef01f556460b6290e9f4845264c244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:75:9f:b1:a3:99:c9:50:a7:d6:98:c1:97:
1a:6e:52:78:40:f9:8c:5f:c0:4e:ad:1b:2f:31:64:
11:64:61:e7:03:b5:13:71:1f:2c:86:89:f7:09:f1:
bc:86:32:3d:d2:3e:cf:d2:79:2c:8a:64:6d:12:04:
ec:4b:6d:bf:b1:a2:08:8a:3b:f9:59:5f:05:c4:b5:
d8:a5:36:14:3a:ab:dd:5d:44:ba:a7:4f:5a:dd:b7:
31:9c:3c:51:a9:0b:04:26:2c:06:9f:39:d2:9c:c2:
e7:dc:37:6b:8b:6f:b1:fc:87:7f:f9:a9:14:04:25:
a7:ac:b0:d5:99:fa:8b:fc:52:68:4f:c2:f8:e1:9e:
9a:3d:73:de:05:b3:d8:bd:fd:29:d1:c3:b3:4c:6d:
3e:b3:3d:ea:0a:78:0b:2e:46:01:9e:51:55:c5:02:
18:4b:6f:c7:67:af:dc:48:62:8f:de:12:7f:12:27:
14:65:73:97:c3:9d:8b:77:26:72:93:6b:99:6b:73:
c5:23:63:c9:c1:da:2e:77:f0:6b:ae:37:95:01:4d:
38:0f:db:ec:76:3e:35:07:0a:32:b8:92:53:af:7b:
50:da:81:dc:60:2b:60:b3:94:cf:d7:1f:6d:12:51:
89:18:cb:de:15:dc:aa:c2:43:4a:31:f5:13:06:36:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:07:2E:CF:9B:EF:01:F5:56:46:0B:62:90:E9:F4:84:52:64:C2:44
X509v3 Authority Key Identifier:
keyid:55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:46:19:87:ac:8c:66:e8:81:41:c4:5a:6f:ef:95:91:b9:28:
33:55:b2:ac:94:e3:98:c4:37:1c:57:19:5d:25:4a:89:57:23:
3b:69:b9:49:38:81:80:dd:2b:7a:c0:eb:bb:5b:e0:1b:2b:50:
6b:e5:16:9a:e0:fb:40:b3:d8:6e:86:99:f1:98:ef:d1:86:b3:
8b:d6:94:2b:e8:21:58:46:42:29:62:98:b0:17:e5:48:14:f2:
38:ac:3a:c4:73:aa:d0:8e:2b:e7:40:6c:da:dd:af:84:2b:67:
0f:75:14:7f:0b:ac:12:aa:f0:e0:6d:84:5f:a9:5c:b8:44:61:
b4:6a:a4:e6:ec:b7:b4:b2:f1:9f:b2:c1:94:a6:9c:d0:a2:59:
e6:09:c8:31:e5:17:14:9c:d5:61:1d:3f:17:e0:67:80:8e:6d:
fe:8d:b9:1e:bd:a8:40:66:b9:26:da:3a:bf:97:98:cf:3c:71:
00:41:bf:66:e0:c1:cd:bb:71:0f:d1:6c:da:78:68:60:58:7b:
2f:cc:eb:d4:d7:e7:49:cb:17:00:a8:b5:c0:0f:66:d9:97:84:
24:33:90:8b:97:61:90:3a:fc:cc:5b:60:ae:51:68:46:1b:99:
04:6d:ad:26:5a:14:59:7c:95:1d:28:c2:fb:92:b7:4b:09:33:
79:f6:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client