Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: wKbtnYVC8+o7DI7HWv3t6q9EqtConv4OWAqCM9pps6s=
Subject key identifier: 52:AD:02:A1:C0:1C:39:9A:DD:22:04:B0:83:D5:12:61:CB:31:94:20
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 0199FBEB7B576BBBCB76CE4C67EAA0185DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 108F
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: DSRxsASVTnbKd3cW95CLjdRWxEmai5ewLX6+Zark3zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7b:57:6b:bb:cb:76:ce:4c:67:ea:a0:18:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=52ad02a1c01c399add2204b083d51261cb319420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:7d:fc:9e:61:f7:62:b4:a4:89:d8:1b:c2:
16:77:ff:63:64:c4:04:ff:44:8b:76:39:52:09:d9:
79:1f:42:19:bd:21:6f:6f:ee:f7:6f:d8:50:80:fa:
3a:8c:0e:11:dd:73:41:a6:46:f0:0c:98:46:e1:c5:
84:86:d6:4c:9e:65:4a:39:8c:d1:51:71:eb:a3:1f:
dc:22:6f:18:40:b4:2e:f1:6d:e0:eb:7e:bf:46:4b:
ff:fd:58:eb:11:68:5e:e5:26:9c:96:a7:ac:cc:b9:
05:4d:e6:c7:4e:15:32:53:0f:f3:8f:73:f4:7c:cd:
b8:4c:e9:a7:ce:6f:5f:ee:d0:c4:92:ac:be:52:2b:
b0:4a:c1:5c:23:0a:e9:ac:3f:09:19:de:22:b3:51:
28:51:d8:c3:56:34:93:3d:23:ce:86:34:7a:56:2f:
f6:ef:e1:c1:0e:e4:41:c1:c2:74:55:99:16:9d:0d:
2a:d4:33:8a:6a:d7:b9:8f:fc:a4:11:d3:28:ec:fa:
0f:2a:62:43:af:d0:ee:f3:0e:65:7f:f3:73:99:1a:
24:9b:dc:2f:a4:b7:52:b6:42:0d:d9:f6:8f:55:66:
ed:54:09:63:0f:b3:a7:9e:a4:36:7e:a5:fd:a8:8f:
ce:89:36:a0:39:20:49:8a:ee:00:21:f1:aa:36:95:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:02:A1:C0:1C:39:9A:DD:22:04:B0:83:D5:12:61:CB:31:94:20
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:da:49:71:d3:a3:16:66:89:5e:7c:5b:9d:ae:1d:7e:a8:
cc:98:19:62:23:26:c1:bb:24:2c:d8:5f:f0:97:91:8b:55:c3:
ca:fb:12:33:98:fb:f4:d2:17:76:30:a2:8e:43:62:fa:83:13:
24:c4:14:87:c8:46:0d:12:cc:84:10:6a:91:88:61:61:08:19:
f0:55:5a:9c:e2:8d:2a:82:65:7f:11:bf:b6:91:34:3f:ec:f4:
b6:e3:2b:09:5b:52:bd:a2:31:1b:a9:9e:10:5a:7b:fd:41:a9:
44:ff:fc:c3:68:e5:b2:cd:38:d7:29:a8:77:dc:6c:f1:39:e1:
f8:d6:ec:a1:60:dd:0f:61:66:75:1f:f9:c7:20:a0:0b:c9:98:
7c:3f:b9:96:be:65:49:d7:9e:7e:49:80:a2:3a:97:d2:45:b1:
56:20:47:b2:f4:89:bf:62:74:2d:2c:66:65:90:28:5b:28:e6:
31:73:1f:b4:bd:60:41:20:81:fc:82:99:f6:99:ad:5b:a8:4e:
fc:bb:bb:7d:07:d4:2a:78:fa:e0:24:69:d5:d2:a3:ee:e5:7d:
0a:67:6b:0a:7b:d5:58:5b:a6:a0:1c:37:05:58:6d:b1:ff:5d:
4f:fe:c8:ed:ea:7b:05:04:a4:64:45:57:35:ee:d9:7f:de:b4:
17:4a:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:10 2025 by rpki-client