
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: T2pK8eEBix8zfkFoL89juCwWIj5eNN7zzHvGgywy6Xw=
Subject key identifier: 20:05:2F:C8:6A:F9:70:C2:09:91:39:BD:97:A8:3E:6B:12:59:BA:4F
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 01988B10894A3D3D735C20D1A970E070A3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 114B
Signing time: Fri 08 Aug 2025 19:02:53 +0000
Manifest this update: Fri 08 Aug 2025 19:02:53 +0000
Manifest next update: Sat 09 Aug 2025 19:02:53 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: sl2rVtLW0/9e0W32LPXqyiIwY4gugFGxhtXAaZObmuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:89:4a:3d:3d:73:5c:20:d1:a9:70:e0:70:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Aug 8 19:02:53 2025 GMT
Not After : Aug 9 19:02:53 2025 GMT
Subject: CN=20052fc86af970c2099139bd97a83e6b1259ba4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:b7:f8:d3:3f:d1:d7:e1:48:2e:4c:7f:96:
28:d0:68:2c:d8:b9:49:5c:55:40:b3:a8:7c:36:ef:
46:fe:ae:7b:80:21:a0:43:c6:a7:2a:5a:f2:4e:01:
6e:05:d3:87:4a:69:cf:b6:51:ad:9c:37:54:f5:b9:
a9:07:f1:e0:24:8f:72:a6:5f:57:fe:4a:71:2a:cd:
b1:bf:b3:77:fc:48:eb:f1:c8:01:d4:5e:f2:54:77:
83:fd:a5:df:21:7c:6b:fa:4f:f4:34:52:2c:80:be:
bd:95:b8:7b:82:d9:15:cb:1f:80:92:8c:12:9b:77:
04:bc:f4:ca:65:8c:f7:6e:0e:d0:5a:71:49:20:ba:
e4:db:4f:d3:89:4a:60:59:72:f5:21:bf:38:4e:09:
ff:ab:59:9c:5f:50:b1:f1:c9:0c:06:bc:b3:68:ab:
56:6e:c8:92:0d:87:40:31:b5:6c:09:b6:49:28:5e:
c6:3c:11:d5:23:64:47:f0:aa:6b:4c:ea:3f:31:52:
de:7d:bb:c1:1e:35:52:4e:46:63:08:11:94:14:60:
14:1f:ba:63:8a:15:be:b1:86:9b:59:2b:3f:67:11:
2f:91:30:51:18:70:cd:a5:f5:1a:26:09:c9:57:51:
f4:3b:29:03:d8:49:80:0f:e5:b7:22:6f:70:35:2c:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:2F:C8:6A:F9:70:C2:09:91:39:BD:97:A8:3E:6B:12:59:BA:4F
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:26:98:c4:2d:b3:6c:f3:77:47:ee:9c:e9:c8:36:78:6e:aa:
bc:81:9c:be:2f:85:31:77:44:58:80:ab:6c:9e:24:9d:6b:c9:
5c:10:51:3a:cb:43:f7:7e:da:a0:b1:ed:5c:f5:65:7e:90:fb:
63:e0:ba:2d:2b:c9:f3:3b:dc:17:a4:e8:c8:8a:1b:68:07:70:
06:34:d7:80:6c:61:8c:d4:8e:4f:e0:1e:fe:e0:1b:1f:49:b6:
65:80:9a:43:fd:0d:29:f8:b6:43:b3:e6:e3:8e:4f:3b:75:46:
99:25:e6:e8:41:3e:e3:fe:23:2f:15:93:dc:a6:4a:dd:aa:4e:
61:35:99:d9:65:09:a4:b2:05:1c:b3:c6:a2:38:9b:33:5a:1a:
c3:a0:c4:1f:a4:c1:65:0b:2e:34:dc:8e:83:10:8c:97:24:2f:
27:4f:6a:e1:8c:4d:a7:61:e6:2d:3e:17:d9:b5:ce:2f:c6:7b:
a4:47:a9:d7:97:2e:c8:62:57:ab:85:62:3b:2a:92:9b:12:d0:
aa:b7:29:9e:d7:8d:1b:7a:64:95:cb:8a:c7:75:d9:1c:3e:eb:
84:f1:c6:2f:d8:61:cf:ad:db:af:6f:e8:00:3d:fb:ae:43:d2:
23:47:11:6f:c8:64:9e:5e:89:7e:0b:94:4a:13:1d:9d:9a:6a:
4b:79:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:04 2025 by rpki-client