Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: 4x5zp1HmmcY1PYOMh7bWuhbvSdwLg4hfqdrX+Y8OODo=
Subject key identifier: 86:DC:FC:D0:73:55:CE:76:18:2D:FD:94:AE:E1:5D:3B:CE:01:BB:8E
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019A70DBF9E1BD4C87CC793B3F24D9209C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 057A
Signing time: Tue 11 Nov 2025 03:00:55 +0000
Manifest this update: Tue 11 Nov 2025 03:00:55 +0000
Manifest next update: Wed 12 Nov 2025 03:00:55 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: 9tr+DboXdbMEh4sG7Zgo7JALGX0yTmBmcWJYJcgTf/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f9:e1:bd:4c:87:cc:79:3b:3f:24:d9:20:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Nov 11 03:00:55 2025 GMT
Not After : Nov 12 03:00:55 2025 GMT
Subject: CN=86dcfcd07355ce76182dfd94aee15d3bce01bb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:67:59:c5:8a:53:ff:ba:dd:fe:de:3e:2b:
4d:0d:bd:cc:2c:ca:1d:ec:f0:d1:f7:09:27:93:a2:
14:77:d1:91:44:bb:09:84:0f:5b:10:d6:b1:9f:9a:
a0:aa:f2:6f:e7:a3:ca:cb:43:69:10:66:2d:63:ca:
b8:01:08:b8:50:ef:94:cc:40:c7:5f:13:ca:a8:ef:
9f:50:99:51:4b:11:96:c3:1d:89:be:fd:19:e2:5f:
4e:d6:c9:6a:3b:c0:33:4e:06:fd:98:a1:fa:cd:2e:
0d:c9:46:d0:4f:62:32:fa:59:20:ec:d3:86:7e:f3:
99:41:8d:3c:dd:ae:72:63:b0:95:21:59:01:27:e4:
27:46:3d:42:c3:d3:e7:89:11:fc:c3:82:9d:75:3b:
a3:5a:ce:41:9d:71:be:44:7b:12:bf:1c:20:5d:90:
69:01:e8:f1:48:49:ac:7d:ed:00:b0:fc:69:f6:be:
1d:9e:7d:30:02:23:5b:7f:fb:c1:81:65:f2:77:29:
95:c9:ae:55:15:cf:2d:7a:4a:11:a8:cf:e5:61:ed:
c7:06:af:d1:d4:39:7d:72:80:93:7d:a5:70:6c:a5:
5b:c5:df:5f:ef:52:11:7b:d4:cb:64:af:9c:f5:4f:
d5:e9:ac:7e:e6:5e:53:e6:9c:23:66:f1:73:71:2a:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:FC:D0:73:55:CE:76:18:2D:FD:94:AE:E1:5D:3B:CE:01:BB:8E
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:67:9c:14:5f:d4:61:b3:70:5a:da:d0:a4:d4:dc:51:52:
d7:1c:0e:ba:36:50:e0:cd:ae:5e:04:21:28:20:ba:65:db:fe:
5a:57:19:a8:67:2f:4a:11:1a:55:59:cb:33:fc:23:1f:dd:11:
31:80:41:18:eb:36:19:93:79:1f:01:a3:9c:28:3b:6e:aa:ca:
3d:03:8f:e3:49:c2:41:93:86:9d:c5:96:f7:cd:33:3e:c4:d3:
d4:f8:01:2f:4c:43:57:71:a3:9c:3d:eb:ea:5d:f5:0c:59:9f:
8a:3a:b2:b9:29:f9:3a:3f:50:93:36:9e:1f:ad:67:5b:d8:ea:
2d:8c:24:6e:23:75:80:b1:36:a7:08:19:09:c4:fd:e9:55:61:
76:d4:f1:b2:ef:a9:12:e6:8b:29:57:be:58:2d:9c:d5:b1:36:
3e:8f:f8:72:ce:25:5a:09:6c:c6:47:b8:fa:ec:be:03:56:d8:
6b:7a:b9:2e:45:63:56:be:44:1c:b4:b5:f8:de:96:01:e4:c8:
df:b7:5b:81:68:42:cc:76:ac:56:97:ef:79:e8:3f:50:5e:f5:
7f:fa:79:8c:8e:73:80:c6:2a:25:51:68:0e:cf:45:42:20:36:
b7:7b:f7:33:89:a0:5a:d7:eb:69:cf:1d:af:72:b7:4f:08:f8:
0f:82:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:23 2025 by rpki-client