Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: r1cu5nyILHUCPJXzqIKqObIzz2xV2B1Zb/j8iBHy9vQ=
Subject key identifier: 2E:5B:75:0F:F5:7B:9C:53:87:B2:22:18:90:53:C7:90:00:64:B3:86
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019A52D1B29A867B02630A02A05341002CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 10BC
Signing time: Wed 05 Nov 2025 07:01:05 +0000
Manifest this update: Wed 05 Nov 2025 07:01:05 +0000
Manifest next update: Thu 06 Nov 2025 07:01:05 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: +HAaa+QZ3MjhsrvDv07Kn/5wbmzpg0AcX15Tm6C9Q7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b2:9a:86:7b:02:63:0a:02:a0:53:41:00:2c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Nov 5 07:01:05 2025 GMT
Not After : Nov 6 07:01:05 2025 GMT
Subject: CN=2e5b750ff57b9c5387b222189053c7900064b386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:49:a5:db:96:35:9f:9f:c9:ba:05:c6:f3:
66:db:03:e6:a2:d2:fe:7e:86:66:e4:c5:c1:78:5b:
35:6c:f5:84:40:23:c6:00:fb:83:2f:d6:d2:6a:0b:
c6:10:a9:56:8c:73:1d:d0:59:28:ea:3b:67:f3:68:
5e:1b:1d:7f:ed:1e:d3:1b:28:45:5b:e3:bf:7e:43:
14:1e:a0:7f:6e:2a:4e:69:17:c6:cf:47:20:a1:69:
8b:f6:b9:46:a6:48:0f:12:95:36:86:df:bc:d1:7a:
2b:38:d2:3b:fb:3d:bb:0f:89:ea:03:30:f1:a7:55:
50:a6:99:40:db:09:61:9e:53:d3:01:25:22:3a:7a:
ec:d4:d7:61:ae:fc:8a:84:ac:02:cc:e3:21:5f:12:
d3:40:8c:1e:70:78:01:5f:5c:a8:07:a0:2e:b1:d1:
8d:20:30:f9:37:d6:fd:95:bd:ac:be:a0:4a:31:dd:
d7:3c:77:86:4f:01:b8:2b:bd:3d:b1:f9:e5:71:25:
1b:45:5e:3c:49:f4:43:e9:c6:ff:ee:f4:85:8b:d1:
13:85:85:36:a4:f0:ed:60:8e:8f:f9:ad:8a:1e:a2:
59:56:4b:e6:38:94:6d:ad:92:93:0e:a4:33:3b:15:
53:b6:ee:4d:70:8b:0b:1e:b4:13:3d:aa:eb:3a:bc:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:75:0F:F5:7B:9C:53:87:B2:22:18:90:53:C7:90:00:64:B3:86
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:b9:61:a5:de:40:5e:d1:e7:9d:25:06:78:88:42:05:3a:
87:97:2a:ef:2d:77:e5:a8:61:d0:86:c1:ed:15:ed:7a:ee:0c:
04:58:ed:80:e0:bb:37:64:23:1b:11:c7:59:9b:ac:68:7c:6a:
97:20:c2:ad:3c:9b:d6:24:4f:e7:91:cc:9a:24:0e:62:99:6c:
a4:f2:92:b1:33:40:3a:ff:a9:7b:7d:c8:e6:dc:66:96:12:de:
e8:13:d0:82:23:9a:28:24:dc:b3:6e:7b:55:00:b9:5d:cd:c0:
0b:bd:3d:ee:50:65:41:c2:57:56:0b:66:1d:3e:f7:41:2c:14:
6b:8d:bf:92:5c:18:ee:a6:98:52:03:28:10:34:eb:00:f5:b8:
b0:8c:b6:e3:96:63:61:99:1f:db:01:1c:10:0c:c1:dd:1a:5c:
83:40:6e:ee:46:8f:cc:42:c8:8d:c7:a5:a3:84:c0:ca:6d:a2:
2a:d9:c7:d4:fa:ec:28:1d:cc:03:de:f8:76:dc:73:d4:5d:e9:
0c:5f:f3:70:ee:d9:6f:be:0a:8e:2c:be:56:f3:9a:a1:10:c2:
ad:86:c5:12:22:46:d3:26:6b:f3:fd:54:7e:7a:43:6d:f3:45:
aa:61:03:fc:92:66:ce:a4:0d:52:50:fd:84:bb:50:fb:ec:6b:
35:c9:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:35 2025 by rpki-client