Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: v4Yasmd6WU2nDuCyeT/XbqQGy/FYiCU6FF04PDTGRY4=
Subject key identifier: FC:8B:FC:FB:B7:80:DC:4E:C9:C2:8C:5D:0F:EF:40:CC:0B:9F:5C:A0
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 019A4D73A8312E5674389D7B92951417DDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0E04
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: E8LNWOZXJiKavg9qUjQjLosDpHb5KT9TIbpZC5yVqC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a8:31:2e:56:74:38:9d:7b:92:95:14:17:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=fc8bfcfbb780dc4ec9c28c5d0fef40cc0b9f5ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:de:9e:0b:2b:19:3b:0b:72:53:49:bf:7b:
f2:53:d1:19:29:06:b4:b5:72:3d:2a:95:d1:af:91:
49:dc:51:68:77:e4:06:00:ae:68:ce:39:bf:61:3d:
9f:63:92:f8:d3:50:4b:46:e4:b7:9c:3c:3e:73:69:
62:b6:22:84:b6:72:10:61:1e:fc:88:45:45:1c:99:
9b:8a:f0:14:88:49:df:81:f3:1f:83:c2:bc:52:19:
57:c8:90:5a:96:68:16:00:1a:ec:e3:09:28:89:b8:
68:e6:2e:52:04:63:27:a5:ce:57:bf:ed:c2:5a:57:
0c:c1:41:a2:2a:16:98:70:40:6c:8e:0b:f0:c2:90:
6f:5c:50:95:fe:ec:61:e4:0f:29:07:aa:75:b5:ad:
eb:24:15:43:e4:2a:72:2a:ef:e7:c5:9f:41:67:70:
ac:0f:af:24:84:18:b7:d1:28:71:bb:cf:e0:0c:93:
8d:a1:ec:f3:05:6c:5e:20:e1:ef:ca:f9:eb:ef:a6:
be:d7:2b:61:d8:c0:c0:a4:0d:59:c1:cb:30:fb:32:
d4:db:e1:a4:6d:eb:9b:7f:7c:68:2f:dc:81:cc:00:
0a:96:08:06:09:f1:1b:63:3c:d8:4a:1a:64:9c:b4:
6d:9f:2f:64:8a:21:61:f1:f7:97:63:b3:bb:f1:69:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:FC:FB:B7:80:DC:4E:C9:C2:8C:5D:0F:EF:40:CC:0B:9F:5C:A0
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:61:ac:bd:45:7a:11:66:bd:3c:55:02:01:57:e4:2f:44:
2d:72:9c:9a:89:70:ab:b1:f7:35:ce:2d:85:ac:51:20:3a:f3:
53:74:c5:3b:30:a1:91:26:3c:ee:19:6a:72:dc:14:38:05:aa:
ad:d8:27:e2:12:d6:0f:14:cb:cf:ed:b1:6b:23:4d:b8:38:60:
0d:bf:d9:9c:cc:f8:3a:37:17:87:ba:dc:38:b9:bf:4d:ba:ca:
96:51:e2:22:f0:69:07:10:11:3a:7b:c1:d1:56:1d:d2:c1:52:
22:ff:7f:05:52:e6:41:b9:78:3c:ba:64:35:21:df:69:75:1f:
12:0e:e0:89:df:4e:b5:44:32:09:15:b5:3c:63:e8:06:97:d4:
00:7c:52:05:4b:a4:4e:c9:cc:73:ad:4e:73:59:c8:c3:8b:a5:
2c:3a:d7:91:d8:20:b9:e7:1c:b2:63:e0:18:82:4a:67:a1:74:
b2:b6:e5:5a:a3:de:ff:65:a4:e1:96:7f:77:1f:5d:a6:86:80:
12:e1:a1:31:68:39:ff:81:dc:bd:b9:88:31:e7:da:8b:1e:b4:
54:10:72:7d:cd:81:0e:be:24:f8:07:b2:12:f5:af:5e:2b:79:
6c:ed:3f:9c:d9:31:97:02:a1:f3:2f:d9:67:71:5f:ea:28:4f:
17:37:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:38 2025 by rpki-client