Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: zAOikZLxnYnUDeowRnVbL5OM5+zg/o6k6lpnMcmFLOQ=
Subject key identifier: 24:6F:FE:D6:A1:45:28:F1:AF:F7:5B:13:14:DE:A4:EA:06:57:67:10
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019A4DE17402C3F021F8A17B1A524D742773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 07EE
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: gfWzEQVEz0TRMXD8ny58b7k5j5WNWsvu88X3aKvl2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:02:c3:f0:21:f8:a1:7b:1a:52:4d:74:27:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=246ffed6a14528f1aff75b1314dea4ea06576710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:7e:78:29:ac:3b:d5:72:63:20:1d:84:83:
8a:cf:0f:d3:0a:df:06:a0:5d:71:f2:f4:71:8f:55:
64:24:b4:96:9c:1c:60:64:77:e3:70:f7:68:68:f9:
be:b9:de:42:b6:14:5a:4e:8b:d3:73:04:c4:5f:b6:
90:88:cd:80:f5:0a:1e:b0:0e:ae:99:63:1f:fa:0d:
95:b4:10:89:3b:03:ca:b9:53:cb:11:99:e1:f0:42:
ce:62:07:34:c1:e5:88:1b:0b:17:70:1a:1d:1e:af:
9b:97:ef:2d:ac:7f:b9:3a:f2:b0:df:41:10:8f:be:
1b:bc:9d:96:7a:1b:e6:69:c0:37:ce:39:7e:0c:31:
96:9d:eb:41:a2:f1:ce:dc:c9:eb:b5:d9:0f:ae:c9:
69:f2:ba:ef:9d:b5:07:db:e2:26:14:72:42:69:73:
ea:72:dd:29:0b:ab:0d:2b:a6:ff:b3:2e:64:62:66:
f1:6d:41:15:a7:78:ba:0f:03:c3:4c:e5:39:21:46:
15:6b:f1:62:08:8f:09:38:6a:d3:1d:fd:2d:f8:d6:
69:a2:4b:5e:42:90:7f:4f:0c:e7:3d:7d:c1:40:94:
73:70:6b:42:22:84:6e:e5:3a:3f:ab:f0:5d:b0:5d:
ba:f6:01:7f:b0:b7:7a:28:5c:d5:e7:c6:89:58:59:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:FE:D6:A1:45:28:F1:AF:F7:5B:13:14:DE:A4:EA:06:57:67:10
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:8e:8f:d4:b9:d9:73:a1:91:a3:2b:a3:64:30:05:36:c1:
6d:8b:f8:64:45:b8:cb:fb:f1:07:0c:41:29:83:75:16:29:16:
24:d7:0a:6c:e4:e4:88:63:55:86:e1:ef:2b:2f:63:21:c0:7a:
0c:a1:42:72:ac:c6:98:cc:c9:61:45:4e:b6:6a:2d:fe:ff:22:
7d:fc:a1:c2:fa:f7:ee:39:a2:81:6e:fa:e4:8b:dc:68:2d:7a:
2a:6e:60:46:de:94:39:7f:11:bb:b1:46:4f:82:98:9f:22:b2:
b0:23:ea:b0:8d:cd:31:55:6a:08:96:cc:4f:62:ad:59:38:25:
57:bd:74:ec:21:f1:22:a5:13:f3:84:7b:78:a8:db:c4:5b:5b:
75:c5:67:bd:32:40:6f:d3:d7:ef:47:57:4c:71:b3:ea:56:e2:
7f:7d:d0:11:9d:3d:ae:a6:cb:2a:14:86:cb:a8:26:45:45:a9:
d1:7c:19:d7:46:9e:15:95:f6:34:ca:b7:6f:57:bc:f4:4f:e8:
29:dd:6b:3b:e7:3b:f5:a3:49:c4:f3:21:65:77:f5:e4:c7:ef:
aa:43:1f:af:7c:59:43:36:e9:b4:5f:d7:78:79:bd:9d:cc:70:
6b:c0:c1:d9:d1:9b:f0:c4:5d:8e:a8:de:13:39:36:c4:ee:2b:
f7:69:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:35 2025 by rpki-client