Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
File: VmczL0gJQe01gDssBLhPNyjTkpc.mft (raw, json)
Hash identifier: HIZ6uI442oGPOcowGF6imMy8YPR78dZTp+C/83wv+DM=
Subject key identifier: D6:04:3A:7B:34:C4:E5:81:C1:7D:E5:A6:A0:F5:0D:14:9D:C6:E8:2C
Authority key identifier: 56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
Certificate issuer: /CN=5667332f480941ed35803b2c04b84f3728d39297
Certificate serial: 0199FC8F7194D70678D37646DABA1370D8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
Manifest number: D3
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: VmczL0gJQe01gDssBLhPNyjTkpc.crl (hash: kjPx0IKVuFLhoLqDJCW0uD3xeqXgjJx36eK5RYV2yK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:71:94:d7:06:78:d3:76:46:da:ba:13:70:d8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5667332f480941ed35803b2c04b84f3728d39297
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=d6043a7b34c4e581c17de5a6a0f50d149dc6e82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:a8:a4:8a:cb:df:b4:4c:49:d6:c3:ec:0c:
7e:27:64:ea:bd:35:0a:b7:f2:56:9d:11:cb:9b:3a:
89:d1:ef:e5:d2:da:27:1e:7b:c9:22:af:9e:24:51:
7d:ba:9b:59:29:89:67:d3:56:95:35:a4:11:f6:b6:
31:16:41:fb:2e:60:da:58:82:be:85:ca:df:bf:c1:
f6:12:a4:ee:2e:dc:03:df:22:4f:b8:fe:33:14:b6:
a9:76:23:65:c5:48:48:fe:c0:43:a3:cc:92:b5:c8:
0d:85:1e:99:aa:18:5a:5d:3a:c2:03:e9:49:75:13:
2f:76:59:a0:91:92:a3:b2:46:00:03:f4:a1:ef:5e:
7b:ce:46:92:89:50:a2:46:44:91:64:39:e9:fa:33:
7e:1d:f5:4e:68:04:ef:a3:df:1e:47:38:a7:48:d0:
06:63:7f:8b:c1:93:24:74:6a:ef:91:3d:38:eb:df:
65:86:9c:de:fc:94:63:ec:00:a7:cb:ee:c4:f4:2a:
2a:26:27:00:29:71:1b:a3:2a:3c:4e:31:20:4a:04:
c5:59:5b:0d:f3:7f:00:83:18:26:cc:10:96:88:6d:
dc:4f:98:fc:0f:f4:1d:48:fb:cd:c8:30:f1:d4:06:
23:9a:5e:31:11:5a:3f:27:11:f2:cc:2d:7d:02:fa:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:3A:7B:34:C4:E5:81:C1:7D:E5:A6:A0:F5:0D:14:9D:C6:E8:2C
X509v3 Authority Key Identifier:
keyid:56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:4a:48:38:0c:f0:97:5c:14:e7:ee:a9:af:2e:49:3e:09:
0b:c5:86:0c:78:6f:c8:d5:6b:41:22:2e:d2:c2:cf:62:f0:b7:
54:2c:a4:7b:3f:44:3b:dc:fd:6c:0f:20:7d:21:a7:4f:65:67:
19:3b:81:c1:ef:e9:f6:e3:46:cd:e2:19:1d:2b:1e:a5:34:3d:
a3:aa:d1:d5:15:26:05:4c:6a:b9:80:2e:06:12:06:27:b1:da:
ce:77:73:49:7a:ed:e8:40:02:bb:9d:16:f6:47:58:ff:dc:c7:
74:83:03:e3:cf:ae:fa:98:82:42:05:d4:f0:79:e9:71:93:db:
1e:2e:51:63:cb:f1:cb:64:52:1b:2f:be:e6:2c:88:3f:16:a3:
10:a5:ba:cb:16:92:07:05:b0:2c:a1:70:4a:3a:9f:76:26:57:
e5:dc:22:23:66:5c:63:ac:7f:00:cb:24:db:9c:dd:9a:e8:6b:
c5:71:b4:31:0e:83:7e:79:33:37:27:2a:b9:a3:b0:0f:53:43:
82:b0:49:22:eb:9a:dd:15:1c:44:0e:59:01:1e:b5:54:2b:f9:
4e:e2:20:3d:dd:30:c6:00:84:bc:c8:45:d1:5c:f5:8c:4b:f0:
3e:8a:ff:be:fd:92:e1:c0:7f:1c:70:6b:41:3a:5e:82:f8:1f:
1e:e7:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:16 2025 by rpki-client