Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: KgMjwlH4TZ1QG8ktI6hFn1I6LChAwdzj2J1k5bWPUmY=
Subject key identifier: E0:A7:05:0A:7B:64:87:F9:DE:6F:9F:B3:7A:DD:01:70:B5:1B:68:F0
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 0199FBEA901CC6594304A866D031C23AA359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: vy4aQInsPno/t9A30m3cl/OEFlZGVNNwbzi5CRCW9Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:90:1c:c6:59:43:04:a8:66:d0:31:c2:3a:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=e0a7050a7b6487f9de6f9fb37add0170b51b68f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:eb:62:e6:38:ee:ab:5e:d3:c4:81:98:1d:
4c:93:d0:a6:24:2b:95:d7:88:b1:13:c8:b5:54:4d:
ce:3f:92:61:ec:4d:5f:2e:ad:20:da:d9:02:25:49:
51:b7:7a:09:ff:01:04:27:1b:44:de:cd:45:8f:c6:
0d:f6:3c:b0:1b:05:33:78:2f:c7:d7:f8:97:82:65:
64:9c:fd:d0:8c:5f:f0:e7:b5:5c:4e:96:79:46:ff:
05:e6:13:76:19:3f:f0:7b:60:55:aa:ac:6e:00:62:
3e:d6:b7:3f:5f:d1:64:81:36:1e:f2:37:8d:06:ed:
84:d8:42:b9:4b:6c:e2:32:e3:db:c1:a2:9d:df:21:
9f:e0:a5:6a:36:e8:ba:f0:96:2b:27:f7:24:0e:4f:
98:e6:19:1c:db:99:cd:b0:1f:24:2e:59:a0:3c:55:
fd:50:1c:77:7c:82:f1:03:1b:c7:94:2b:27:1e:28:
88:e2:5f:59:b8:2d:25:26:dd:d8:23:a5:98:11:91:
c9:ac:21:d5:c2:6d:af:0a:35:52:f2:90:84:58:73:
4b:7e:75:35:81:6b:a5:56:56:a2:ed:18:ea:4e:43:
1d:e9:30:f0:23:88:79:03:87:2f:99:d7:5c:4e:70:
0f:d8:29:52:66:c0:65:fc:08:cc:c4:42:60:85:2a:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:05:0A:7B:64:87:F9:DE:6F:9F:B3:7A:DD:01:70:B5:1B:68:F0
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:64:e3:4c:4b:80:d1:1b:2c:a0:a1:20:e0:d8:13:82:7f:54:
c5:75:34:81:25:46:e3:bc:ce:cf:e4:d3:4f:c8:c9:97:29:4a:
e5:ee:28:4a:47:31:9a:3b:4f:72:53:63:38:bb:4d:0c:47:a3:
96:d5:7f:ca:b2:70:0f:3f:02:bc:af:2b:5e:da:35:1a:25:ef:
d8:49:bb:52:47:0f:45:6e:b2:6c:d7:00:17:17:fa:07:9e:00:
5e:9c:b5:34:5c:93:01:29:21:b4:2d:8f:a6:a3:48:c7:18:32:
3f:02:ff:6d:22:64:b1:ce:5e:3b:9d:83:89:3d:22:4e:9e:e2:
1e:e0:9d:27:e2:b8:03:06:67:7b:62:d3:ec:a0:3d:48:b4:df:
0a:be:97:bb:da:e9:3b:ea:63:1f:b5:14:2a:8d:3e:b1:6b:25:
2c:48:ed:fb:94:1c:5f:e1:98:29:6c:12:d3:9e:14:ec:c0:c8:
ed:ab:72:62:6e:cc:c5:b5:a9:12:0c:ac:29:3b:87:e0:ce:2e:
2a:3e:d9:c4:50:96:08:9a:cc:73:1f:8f:1f:15:20:84:b5:d4:
4f:bd:26:4e:13:a7:a8:eb:ff:55:29:c2:ef:8c:5f:f4:e4:b6:
8d:d4:d9:c4:99:42:0d:4d:e7:34:26:3f:e6:a9:e4:11:c8:12:
83:15:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:58 2025 by rpki-client