Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: Y31yvddB9SwYTjK/UH0fVKppPu0ljqL7vHr1w+4YFgY=
Subject key identifier: FB:C0:79:30:53:AE:9C:8D:30:46:B7:5D:1B:4F:47:82:27:69:A7:51
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 0198A04D6D6328706891355E8B9C9938F3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 0FDB
Signing time: Tue 12 Aug 2025 22:01:25 +0000
Manifest this update: Tue 12 Aug 2025 22:01:25 +0000
Manifest next update: Wed 13 Aug 2025 22:01:25 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: Twi42XkjQJ0UQ/nTv+20VaXBMk3qiUQokeyJ0qO0mNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:6d:63:28:70:68:91:35:5e:8b:9c:99:38:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Aug 12 22:01:25 2025 GMT
Not After : Aug 13 22:01:25 2025 GMT
Subject: CN=fbc0793053ae9c8d3046b75d1b4f47822769a751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:08:c9:eb:fb:f9:4b:42:30:6b:6d:96:cb:
f6:00:73:f1:84:a4:6f:5a:12:07:8b:95:81:ec:b2:
00:ad:1a:e4:e4:b4:f9:ae:2d:fa:b3:3d:92:57:c6:
d3:66:44:a9:8e:a5:d9:10:24:7b:39:e2:64:aa:1e:
33:28:e2:22:16:41:6a:5d:95:2f:09:5d:6b:95:d2:
2f:bb:3e:52:e5:ef:32:ad:a1:af:b2:41:1f:77:a5:
6e:ee:7d:1b:8e:97:22:fa:22:8b:34:9f:bd:d3:c9:
41:2a:44:11:88:25:9f:64:9a:ed:e7:8f:b7:03:44:
a2:46:37:59:e4:46:0b:9a:17:39:3a:2a:88:ae:88:
77:c5:fb:8b:5d:c9:ae:be:76:55:2f:b8:0c:e8:aa:
c4:b1:e6:e2:39:8d:0b:2d:40:70:af:4e:00:4d:78:
21:34:22:73:c2:3e:85:01:7b:45:46:6b:73:8d:1e:
37:f4:cf:0a:47:99:2d:e9:8c:d8:fc:4f:7d:02:2f:
49:ac:0f:b5:0b:53:8a:d7:30:ac:23:32:64:ff:fa:
7e:80:50:17:8b:07:e7:de:03:6d:02:2f:d9:01:18:
29:54:d6:75:f9:12:0a:84:a6:55:d8:b4:1c:93:2d:
3c:e9:e3:a2:2e:7f:01:a1:28:f3:9c:64:ec:33:d9:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:79:30:53:AE:9C:8D:30:46:B7:5D:1B:4F:47:82:27:69:A7:51
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:86:0e:3c:da:9d:14:45:b3:79:f6:64:54:57:26:40:27:
fd:b2:9c:89:19:48:b4:a1:60:da:02:39:5c:f1:64:cb:69:e7:
ba:9c:4e:2d:89:fb:3c:65:0a:f4:e4:36:9d:3e:9b:d1:35:fc:
72:48:98:9b:77:95:ad:be:ea:80:28:07:4f:34:13:58:5b:7f:
07:9f:29:3d:6c:09:6e:9e:4c:53:16:ef:f2:0d:a1:95:99:c4:
0f:b3:2e:49:39:d9:69:79:82:70:3d:b6:c1:18:69:42:31:6d:
b0:7a:4d:1a:80:0d:09:5c:0b:33:64:68:bb:62:ec:0f:1f:ff:
74:48:86:df:43:84:8b:0b:39:c8:0a:1d:6f:bf:4e:f3:5f:80:
4a:1a:92:ec:19:52:d4:3a:c0:ca:4b:26:b2:bb:53:fa:9e:b3:
91:6e:8c:d2:6e:93:58:3f:ac:4d:a8:ec:e0:d5:cc:bc:39:d7:
c1:b7:a6:6e:52:92:e6:28:25:a5:a1:3f:15:21:08:ba:62:e5:
9f:84:3c:7d:f5:7c:b0:36:06:8a:49:02:23:95:69:7a:81:10:
db:d5:3b:76:b2:83:d1:3c:16:47:c3:da:f0:46:91:cd:3c:60:
bd:5f:31:60:9b:d7:aa:a6:23:f6:87:67:38:92:18:44:58:83:
ac:2b:51:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:35:38 2025 by rpki-client