Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: flIFvSJBqd2tikKKFKycJJ3C1B2P3Ul+MGc7bM8b3Bk=
Subject key identifier: AE:DB:6E:6F:63:7F:17:FC:79:72:7E:54:F4:4E:F5:FC:95:62:D1:24
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 019A71B92FB66A488ECA629DE888B28271D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 1247
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: Pw4TgVHlVRC9sYqFaQLzgerViLFsJ8vUyLZ7s3LIaPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:b6:6a:48:8e:ca:62:9d:e8:88:b2:82:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=aedb6e6f637f17fc79727e54f44ef5fc9562d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:2b:a1:82:d5:e4:e7:bb:82:f3:f4:a9:94:
3a:09:b4:5d:1c:98:00:bb:0a:ef:f3:94:b8:d5:d1:
99:88:4d:16:0c:ec:d4:f0:5e:cb:ce:c6:7e:a8:47:
8c:30:62:2d:04:34:65:a4:5b:4c:25:65:0c:c8:a9:
fa:c9:5e:38:bf:61:16:b8:a8:33:d4:95:60:49:d1:
f0:ee:f4:07:c9:76:0a:ce:bf:8c:e9:7c:86:94:d7:
1a:84:01:2b:37:b3:a6:72:3e:bd:b0:d8:a4:59:dc:
fd:36:5c:e1:7d:a0:31:7c:52:7f:45:6b:42:8f:1c:
96:19:67:80:75:4f:71:ff:2f:e2:48:01:f0:e5:e3:
67:20:3a:bf:e6:ca:c9:da:79:f1:da:37:77:61:65:
df:06:55:16:9e:08:f3:b9:72:3c:2d:a3:49:26:e2:
f7:d9:3b:78:67:84:b3:8d:10:e6:be:1f:0b:11:08:
8b:b9:42:46:51:e3:c7:a0:08:b1:22:ff:13:6c:48:
46:a9:4a:20:74:d0:f9:34:29:a2:8c:66:12:34:ab:
6c:ea:6b:a2:7e:46:b8:72:af:c1:98:15:3f:6b:db:
8b:7c:84:58:6f:de:6a:e5:12:e6:27:6e:60:8d:e0:
ba:4f:57:80:9f:f7:f5:72:dc:d3:e9:d1:fa:b6:0c:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:6E:6F:63:7F:17:FC:79:72:7E:54:F4:4E:F5:FC:95:62:D1:24
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:36:1b:8d:88:ac:7f:e4:ac:a2:30:3e:54:0d:d6:53:0c:37:
1b:6e:14:44:b9:d7:26:36:67:3e:ad:f6:30:45:2d:f6:da:3d:
34:75:b3:44:20:df:dc:eb:fa:8a:7d:73:b6:b4:dd:3c:7f:df:
4a:53:2b:0c:31:12:08:e2:c9:95:41:d2:b5:10:65:8c:2d:75:
a7:01:8d:79:46:df:47:9d:16:de:0a:1b:ef:cf:b3:cd:4e:43:
eb:b9:f2:ac:96:8f:64:3a:db:a5:4c:32:68:47:ee:9e:2e:06:
22:10:24:d3:d0:9c:0a:70:cc:5b:12:78:4f:ab:32:f3:c6:2b:
0f:fe:b5:3b:09:90:bb:6d:33:13:5f:39:21:5a:a9:37:90:b4:
55:58:98:14:eb:d0:30:05:fa:6f:71:04:f7:51:69:90:7d:83:
ea:d5:a3:29:75:8f:82:d3:95:00:d8:5a:6c:8e:dc:77:9d:f9:
ec:ed:7a:73:aa:57:74:48:ff:63:3c:53:cb:8d:25:27:45:4d:
08:c3:43:13:29:02:ec:e8:30:e3:86:96:7c:60:63:2b:88:5b:
e3:af:ef:e6:97:7b:e6:c9:bc:1e:01:6d:4e:ac:b4:85:e8:5a:
06:ae:f0:ba:32:45:0b:9f:31:39:5c:97:3f:62:fb:54:bf:6c:
4d:1d:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client