
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier: b4OHE4BEdQAfrMfeFeVHQ2lOmyrvkypIHkcvHOWpJIg=
Subject key identifier: C5:9B:A1:31:A0:63:EF:10:98:6F:46:09:79:5C:E7:47:D9:8F:93:6A
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial: 019A4FD074B67DF160FAB54498CE2CB5EAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number: 04E9
Signing time: Tue 04 Nov 2025 17:00:52 +0000
Manifest this update: Tue 04 Nov 2025 17:00:52 +0000
Manifest next update: Wed 05 Nov 2025 17:00:52 +0000
Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: xmJb3CVTjKe9zkBAa0raspvPdBkIcfQZ+/Y+AmJBxXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:74:b6:7d:f1:60:fa:b5:44:98:ce:2c:b5:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
Validity
Not Before: Nov 4 17:00:52 2025 GMT
Not After : Nov 5 17:00:52 2025 GMT
Subject: CN=c59ba131a063ef10986f4609795ce747d98f936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:8f:3d:82:f2:cf:d9:b5:cc:b3:3e:3f:65:
45:ea:d9:a2:d6:42:a8:90:6a:96:17:12:f1:3a:63:
ea:5f:58:7c:1a:52:6a:5b:cf:a5:09:84:95:64:4c:
16:b0:66:06:92:3d:b9:54:32:2d:f7:71:97:c1:2b:
9f:74:70:ec:83:7e:28:ae:8f:bb:cd:e5:70:8f:e2:
29:84:a6:0d:39:c4:0c:22:ef:d8:3b:2d:5d:de:f0:
99:ad:83:99:50:95:7b:14:f3:39:ca:a0:26:5b:f0:
f2:63:8b:20:7e:80:03:08:59:2c:d9:7b:20:4a:41:
b4:a9:c3:b8:7e:d8:00:d8:3c:dc:4b:1f:c7:67:a0:
2e:a9:a0:55:a2:01:7a:bd:87:be:80:46:d3:5e:85:
df:9b:60:85:93:80:32:ac:cb:ba:ea:ac:f1:2d:6d:
d1:d2:c3:48:a7:9a:7f:5e:dc:8b:e4:35:3c:e3:b6:
1f:a2:00:04:ca:5e:a9:60:e2:28:22:a5:85:09:0f:
42:da:1c:c1:39:9d:67:bb:51:3d:2f:55:6b:a2:05:
96:81:cf:f4:b6:07:98:28:c2:d0:9d:99:28:98:27:
36:50:c6:dd:c2:16:92:26:89:04:25:54:af:6a:46:
25:1c:e0:f4:5c:d3:a0:d2:46:e3:d1:d7:33:b8:91:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:A1:31:A0:63:EF:10:98:6F:46:09:79:5C:E7:47:D9:8F:93:6A
X509v3 Authority Key Identifier:
keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:30:24:95:65:d6:2c:55:d7:bf:6f:1f:3e:2f:c6:1c:5f:
c5:57:48:e6:47:c9:b7:3c:93:df:4d:2c:a6:6c:a4:4b:f7:5d:
36:62:e7:f9:d9:46:61:1f:71:7b:a8:58:6b:a1:43:4d:74:ac:
53:4d:a6:38:c6:0c:12:d0:16:35:5d:ce:6e:9a:24:3f:2c:08:
c5:6f:31:0f:f8:d5:a2:6c:77:2d:f9:38:33:51:52:ba:d8:60:
c4:20:e5:61:30:91:43:5d:2d:64:9d:fd:62:65:f7:f2:46:36:
c0:d2:91:20:0c:bd:ab:f9:1b:60:91:e6:67:15:fb:7e:e2:7e:
d3:17:4b:80:31:a6:41:b6:ce:4d:88:da:e1:e8:cb:11:90:57:
df:d1:37:28:d3:19:f2:28:4d:e3:a1:ba:d8:86:dc:18:dc:02:
dc:cd:10:17:60:e9:a5:6b:46:60:e5:a1:1b:4b:82:ad:ff:93:
8c:c1:56:c3:4e:e4:cb:66:16:74:4e:f3:f6:3c:7b:1b:c7:5f:
a5:13:be:2a:53:b8:41:a9:78:02:10:57:56:42:da:0b:a3:14:
27:18:89:cb:de:0b:42:c8:6f:22:ed:33:98:a2:76:c0:ba:02:
8b:af:d0:ea:fe:57:c1:05:10:46:d3:f5:a3:42:55:96:da:27:
7a:50:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:58 2025 by rpki-client