Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: fNblAAbDfqLUtGsQ6uuxhyEeUqOYv0StO5rN5R/KfbI=
Subject key identifier: 5D:81:ED:F3:0F:D4:74:89:1A:D9:35:2F:85:17:54:BC:E5:C4:90:C8
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019A70A54D5994AB7A5F485EBDCDBDEF830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0800
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: Ax2URxDsSsW+IVqHzElurvuK1f3IfeJMHhO5tR0dTMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4d:59:94:ab:7a:5f:48:5e:bd:cd:bd:ef:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=5d81edf30fd474891ad9352f851754bce5c490c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:da:d2:35:3a:f5:3c:3a:3c:84:2f:c8:a3:
02:ad:b5:b0:cd:49:43:8f:e9:80:42:46:fa:df:13:
23:dc:35:3d:02:cc:27:b7:6d:7f:c3:ac:73:65:cd:
a2:96:90:c2:68:ba:9e:0e:6d:5b:83:da:03:80:50:
7f:58:ed:67:c0:64:75:80:d3:e7:1e:c7:c4:88:cb:
8b:12:83:c3:78:9a:27:52:62:6f:8b:d0:95:97:1a:
29:ae:c0:59:25:41:35:e1:0b:22:cd:72:7f:4d:a9:
06:b1:e7:ea:61:b1:75:3d:aa:f8:5f:c2:d2:63:c8:
27:a3:4f:4c:a2:af:e3:7b:96:da:60:dc:cd:49:e0:
07:dc:87:c0:58:43:58:4d:1e:ad:b1:13:fb:1c:73:
b2:fb:f3:3e:fe:f8:4b:40:61:90:fc:ff:34:d7:3c:
81:f7:e8:57:56:d3:f4:9c:49:2d:15:1d:db:99:c7:
83:0b:7b:38:09:3a:92:44:07:8d:18:4c:03:ec:16:
3c:44:1d:9e:8b:e3:c5:31:e0:27:e2:db:7e:98:28:
2e:32:d3:7e:f0:e3:c3:cc:3f:7f:f5:d0:d2:a1:45:
48:ab:fd:f0:cf:38:63:4f:e8:de:51:6f:c3:3d:83:
60:01:a7:40:8b:50:72:fd:23:ec:99:04:86:19:25:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:ED:F3:0F:D4:74:89:1A:D9:35:2F:85:17:54:BC:E5:C4:90:C8
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:c6:c6:96:b2:a7:9a:0c:4f:37:bb:ba:12:a3:5f:a8:fc:
cb:9f:81:16:cb:82:6c:2c:e5:9e:40:74:90:4d:e4:33:6c:87:
b1:fe:d0:f0:af:56:a6:8e:f8:66:92:c6:2e:6c:56:9f:fa:e6:
91:d0:a2:ac:65:0f:79:d2:bc:84:84:b6:e0:fe:29:bf:8d:60:
f8:c3:55:3c:de:a5:10:fc:e9:12:6b:57:51:44:5a:2f:27:bc:
bc:04:5d:17:37:48:41:d6:15:b3:d6:93:11:85:dc:ed:33:6a:
5c:f6:b3:f6:a2:85:14:f4:4f:46:73:6b:51:de:85:4b:ae:bd:
9a:c0:5d:da:df:f3:e4:e1:46:f6:39:7b:95:12:ad:77:6b:3a:
d1:bc:84:cf:35:48:9f:8e:8e:7a:21:e3:56:a6:cf:55:d2:6b:
28:ff:ed:92:2b:12:5e:a7:4b:eb:05:8e:b6:10:fe:e5:b3:a5:
72:f4:74:e4:e1:4d:77:81:9c:a2:e7:a8:8f:4b:04:09:00:26:
d4:01:17:bc:e0:8e:51:dc:80:b8:eb:04:4f:e2:b6:1c:7c:e4:
06:ea:fc:c8:1b:ed:e9:0d:c3:c3:e9:af:f0:d3:45:7c:8b:d9:
f1:82:fd:6d:00:4f:99:19:11:de:a0:ee:65:59:31:36:b7:04:
66:53:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:59 2025 by rpki-client