Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier: ErqiyV1zcSs439+B3oFJ896/wastJMNbbX7iCuARkA0=
Subject key identifier: 3F:7C:A8:5A:A7:4C:2E:E0:46:FE:62:5D:E8:D4:B9:74:B1:7B:C6:57
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial: 019A4E18D07D50A21185DC8F9E8FDBCB0C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number: 04E1
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: IwyIXwrH0KtHaPe8LOUnDo9YKUft9zHtIuCuiuzfunk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d0:7d:50:a2:11:85:dc:8f:9e:8f:db:cb:0c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=3f7ca85aa74c2ee046fe625de8d4b974b17bc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:e1:1a:f9:0f:49:1b:11:bf:47:05:f5:57:
eb:de:81:39:68:a8:6a:70:e9:eb:65:b7:9c:9d:00:
a0:e6:66:f0:43:52:15:e4:7c:df:8a:3a:5d:23:86:
a3:40:1c:ce:58:a9:20:f5:10:17:a1:06:25:c1:6d:
19:21:4e:40:fc:e4:bb:56:05:43:2c:76:0d:09:1a:
4f:62:73:00:14:69:39:18:a2:aa:82:86:26:ac:89:
7c:82:9d:46:c7:3f:b2:e7:db:d7:07:d1:ed:f5:d3:
28:c0:f0:8b:da:85:7c:02:d1:95:c0:26:89:de:0a:
f9:1f:a0:b3:7d:55:58:7f:3c:80:3a:16:0c:ff:32:
52:db:e9:3b:47:2e:d4:56:8e:01:bd:4d:b0:c1:65:
42:6f:9f:fa:5c:ac:eb:73:6a:c6:58:be:82:1f:ad:
6e:81:94:13:bb:e4:90:6a:17:20:1c:58:0c:05:cb:
e2:d7:36:b5:52:e7:7f:31:4a:40:59:6d:e4:cd:b6:
f8:e8:bd:3b:6b:bf:60:05:76:e6:38:02:ce:ce:b1:
aa:1e:01:6a:42:1e:b2:03:20:5b:b2:21:aa:5f:4d:
7b:68:98:b9:e8:64:eb:11:c9:8c:83:a3:89:91:4e:
57:5a:e5:ef:ad:e5:c7:ad:9b:d3:b8:0e:e9:ed:db:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:A8:5A:A7:4C:2E:E0:46:FE:62:5D:E8:D4:B9:74:B1:7B:C6:57
X509v3 Authority Key Identifier:
keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:4c:95:39:97:35:89:77:07:8b:53:3f:e6:9c:bd:35:b2:
24:e3:42:25:33:ce:25:70:d8:e2:ca:1b:cc:53:af:e7:8d:d7:
38:d8:08:59:4c:7f:b2:6d:1a:2f:36:6d:f3:c0:7e:cd:72:5f:
8a:5e:02:95:44:2b:fd:cc:75:29:0e:ba:56:bb:d8:38:70:08:
81:15:5b:5c:bf:0d:ff:25:c2:78:32:70:e2:d3:86:f3:d0:bb:
b0:99:d5:90:e9:36:11:d3:43:6b:62:10:28:1a:e5:99:d6:74:
57:54:ba:43:d0:35:22:ed:da:3b:2b:c0:3c:8a:02:05:01:b5:
84:70:84:3e:92:7a:50:95:b4:b9:11:00:6e:f8:7c:29:21:74:
97:3b:56:46:79:7c:f3:df:82:b6:95:96:ce:a7:71:c1:ac:3e:
f6:78:af:20:32:c7:06:5e:cf:f5:3a:55:6f:13:52:76:e6:3a:
46:48:38:7e:cd:63:d0:07:40:1d:24:9c:d9:d4:35:10:38:3f:
18:68:f3:54:41:3c:71:b5:84:4c:ff:06:da:65:0c:cc:5f:b9:
9a:d6:b5:c2:e9:ae:c4:2d:f6:fa:cf:b8:c5:13:23:f3:97:b3:
43:ed:a4:4a:51:2f:00:f7:50:83:5e:87:9b:ba:be:7b:91:0e:
ba:34:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:40 2025 by rpki-client