Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: o6OrMDFmopIO5DepOmtN5D0r6gBYfzPZbv1jTmAKsIU=
Subject key identifier: 74:2E:79:D1:91:1E:15:B7:FC:D3:5A:1D:D0:DB:D7:04:62:FC:CB:A7
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 019892FF4D986C697824711BC7D0857A14BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0D20
Signing time: Sun 10 Aug 2025 08:01:01 +0000
Manifest this update: Sun 10 Aug 2025 08:01:01 +0000
Manifest next update: Mon 11 Aug 2025 08:01:01 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: KJYYYf8Xn8nVJPFF9/plWAfFmKHutY7owjBtXAKEH8s=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:4d:98:6c:69:78:24:71:1b:c7:d0:85:7a:14:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Aug 10 08:01:01 2025 GMT
Not After : Aug 11 08:01:01 2025 GMT
Subject: CN=742e79d1911e15b7fcd35a1dd0dbd70462fccba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:81:c2:6c:7b:6e:c0:e6:02:11:63:12:7e:
31:83:d0:65:02:58:37:f6:af:f9:a8:c3:11:9f:2c:
a9:5f:62:36:19:69:37:05:19:de:ce:45:fa:c0:58:
2c:b9:5c:2f:29:41:37:5f:35:d9:e7:57:29:e6:55:
30:84:98:bb:01:cc:95:39:1e:ee:7a:3b:2f:0e:de:
6b:ce:2b:b0:8e:fb:cb:74:75:e9:27:cc:09:a6:bb:
2d:cf:d7:1a:01:1d:4b:f4:19:98:ef:90:46:63:d2:
e5:96:b0:91:1a:2c:99:68:44:28:93:91:00:b4:69:
b4:93:27:a0:28:08:36:03:30:ad:e7:21:ad:6e:f1:
c3:7e:cb:4a:be:31:79:71:01:33:29:3c:05:d3:38:
36:35:70:bc:a1:a4:b4:b7:75:56:8d:14:df:3c:e5:
20:03:15:02:0c:99:40:4f:c6:18:1a:36:0a:cf:ec:
bc:b8:3d:e7:1b:79:94:35:30:fb:b5:d6:3b:c2:c4:
4a:13:96:81:71:bf:4d:7a:3c:1d:93:4e:a8:47:39:
7e:7b:02:6a:04:e5:52:28:55:4b:a5:da:29:1a:5b:
ec:f5:d6:e1:be:ce:9d:c4:05:4d:d5:da:b5:7f:a1:
ec:a4:c9:5e:94:06:c3:3b:c4:6f:28:5c:5d:60:6e:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:79:D1:91:1E:15:B7:FC:D3:5A:1D:D0:DB:D7:04:62:FC:CB:A7
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:a0:e6:3c:83:00:6b:bb:1d:69:e0:82:c0:3f:30:63:07:
89:d0:a4:81:73:fe:5b:44:37:f6:f9:a4:d8:50:71:e8:a7:8f:
0f:00:a8:1c:04:c4:c4:bb:5e:f7:05:96:b0:5d:6d:f6:56:5e:
ad:1f:65:cb:55:cd:41:6f:9c:a3:75:fd:c9:dc:fb:39:31:d7:
e1:35:b8:7c:d1:5d:9c:a1:b8:95:85:da:8a:02:9f:4f:0b:46:
a2:1e:5c:91:c1:5e:17:a2:4b:5c:20:3c:6d:e9:d0:3f:f6:9f:
bb:08:2c:00:ce:38:ad:ca:0b:9d:39:73:7e:1c:2f:7e:4a:76:
2b:f8:38:7e:25:94:20:00:4c:e9:00:b4:5a:24:30:ee:6c:81:
16:22:38:22:38:c2:5f:c8:97:19:5b:76:6f:22:39:d5:bc:fc:
1c:bd:bb:92:9e:a8:df:f4:40:99:70:13:a5:a0:a7:c8:fe:2c:
8c:8a:2b:e6:81:fb:8a:a3:3c:74:6c:af:3f:1a:c4:6f:0d:a9:
e7:d2:42:0b:59:19:a0:f0:ba:28:a8:c2:37:36:fc:8f:30:2a:
c1:e0:87:b5:13:82:52:de:12:ee:b3:82:83:08:56:39:9e:91:
66:b6:c7:cb:ec:ed:43:81:d6:73:39:6f:84:5d:77:54:76:69:
5d:5b:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:42 2025 by rpki-client