Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: Ap8QmMLOTpEm2tbW/4NCcXdNnCRjSVUjp3oDW8RQ9Ms=
Subject key identifier: F5:80:6E:C3:94:DC:DE:15:65:73:46:52:79:E5:DB:D9:41:B1:2E:6D
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019922C348AA63946249A5BB2F4208FF1ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 04CD
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: ulQmu82W5c7GH0uHdD8s0cFIz+gVPYQ9asIN8Va3kY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:48:aa:63:94:62:49:a5:bb:2f:42:08:ff:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=f5806ec394dcde156573465279e5dbd941b12e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:5a:a4:ba:ed:e3:2f:28:8f:b4:9c:7d:57:
67:43:0a:bc:c6:9a:43:29:b1:31:28:12:2f:7d:1c:
e9:f8:a8:4c:f2:ec:cf:88:c8:9f:0f:66:dd:91:3b:
f6:71:b4:80:6f:70:aa:ad:8b:a9:6b:79:61:3f:2d:
ce:0a:9b:17:19:75:36:9d:65:0b:57:c2:eb:7d:44:
88:b9:38:51:82:c4:05:76:9a:6b:72:39:bf:e9:3a:
01:00:36:d6:2f:fb:cb:77:2a:5e:ec:e2:e2:c0:ad:
99:2d:4a:c2:16:56:e3:d2:88:a0:a4:dc:b4:5d:91:
d2:06:eb:02:80:b8:4d:f3:ba:fa:52:3a:8c:bf:21:
93:b2:0c:fa:a9:4a:54:c6:9e:22:e3:bf:d0:a8:7b:
b9:6f:f5:4a:8f:be:07:a4:76:f7:83:cf:08:d1:04:
ca:10:28:71:cb:b7:cc:77:be:e2:f0:05:3a:3a:d9:
e3:07:9e:8b:0a:38:de:3b:cb:4f:6a:1f:77:55:38:
b2:8c:1e:5a:10:86:4c:df:b5:76:d0:ce:a8:43:4b:
2a:9a:2e:84:ce:f8:ed:3b:42:79:76:ed:97:4a:7f:
bb:dc:74:60:f6:04:29:48:63:7c:2f:70:3e:bb:77:
4d:dd:b7:e6:05:f4:a7:8b:d2:9a:a5:5e:aa:f3:ae:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:6E:C3:94:DC:DE:15:65:73:46:52:79:E5:DB:D9:41:B1:2E:6D
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:25:8f:72:59:8a:a8:3a:03:91:b7:7a:21:62:0b:4c:30:be:
c0:49:32:e4:8d:32:1d:09:08:b6:d0:b5:82:dd:47:8d:ff:ea:
96:19:54:44:2c:5f:b9:db:94:a6:3e:cf:57:2a:f8:19:8b:9e:
9a:05:3b:ef:6f:5d:52:75:86:53:25:13:9f:6d:31:90:6a:d9:
63:d3:e1:58:58:7d:61:9f:c5:b2:a1:d8:e1:ab:29:29:b0:42:
48:1e:66:62:ad:d3:c5:71:46:44:2c:8d:21:67:36:73:33:c9:
a4:6a:14:4c:a7:ec:05:31:e0:12:dd:c4:89:6e:19:da:c0:5d:
54:04:20:59:97:e4:ba:88:71:84:34:f7:e5:88:f6:b7:34:ef:
c1:3d:84:89:4c:88:49:3f:15:10:ec:21:9d:5f:a0:83:e8:68:
75:d5:fb:a5:76:13:b3:9a:a8:f9:3d:39:ed:71:25:33:05:d0:
24:3d:f5:8c:d1:69:0e:1a:e2:f0:55:78:f2:eb:11:c8:d8:40:
23:35:ce:7c:56:fa:ba:20:41:0a:de:85:f2:ff:b6:b8:29:c5:
da:12:69:30:93:d7:14:0a:ca:60:50:19:72:71:db:29:b1:ba:
a3:d2:89:51:67:f5:4b:d9:49:96:77:88:63:4f:b9:e2:1c:80:
8f:57:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:41 2025 by rpki-client