Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: 6kyeCKdGKO0fn9S+RXjismfFiorapBCUgKlOooRmWv4=
Subject key identifier: 61:A4:FC:2B:21:93:9B:F7:DD:FB:4C:6F:22:E1:E2:D5:18:15:1D:36
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 0199FE46E7315C42AFCA0FC9DD6D4C9DEF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0DDB
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: IAU90ub28VKj5A6zJYyNjEEcYUyHFfGTkj/tFr81Ceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e7:31:5c:42:af:ca:0f:c9:dd:6d:4c:9d:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=61a4fc2b21939bf7ddfb4c6f22e1e2d518151d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:ce:43:a1:59:27:c0:a2:44:6e:62:28:7e:
16:40:9e:fc:60:e7:a8:4f:eb:6f:ec:f1:fa:23:43:
c7:85:64:0e:b1:ce:1c:41:d2:1f:b2:8a:72:c5:26:
89:0a:5c:2b:a4:ba:c3:75:cd:17:ac:5e:4e:ff:82:
48:2a:69:20:87:2b:cc:ff:80:78:3c:3e:6e:86:e7:
ee:e3:16:34:fa:f6:fb:a6:7e:6b:ce:4a:a8:db:40:
6d:c1:3b:9b:03:5d:fa:09:ea:20:53:8e:64:e7:58:
50:fb:e5:40:1c:9b:ef:ef:29:b4:09:cb:0e:38:86:
a3:cb:cb:23:24:9f:7a:3a:ee:bd:b9:6c:1e:c9:e5:
ec:ea:88:5f:98:20:66:69:4f:7b:5c:7f:f7:35:d0:
d2:03:e7:c8:f1:d9:c6:2a:68:55:01:55:03:5f:c7:
8c:aa:b3:9f:4b:f4:b5:28:b4:51:ab:1e:c6:dd:a0:
53:be:e1:10:50:75:e2:8c:5d:83:2a:4d:f0:d0:80:
6e:05:e7:5f:4c:c5:e8:5b:ac:b4:99:c6:8f:8b:2e:
75:60:27:0f:0a:7a:b4:23:cc:64:0d:00:0d:79:d2:
b2:9d:85:e6:7e:97:f9:9e:f5:79:91:69:0b:ac:45:
bb:7b:ea:7c:07:db:6b:38:6c:ed:1c:71:a4:dd:d3:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:FC:2B:21:93:9B:F7:DD:FB:4C:6F:22:E1:E2:D5:18:15:1D:36
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:2c:89:47:0d:5b:55:41:a5:c5:74:ad:74:30:37:c7:b5:
37:47:89:47:eb:02:f3:74:9b:75:d0:75:a9:f7:5c:fd:43:b2:
15:fd:08:f8:64:cd:6e:f7:18:68:f8:92:91:48:88:89:ab:b5:
a6:15:4c:cb:31:bf:74:9b:98:eb:82:f6:39:73:4d:2a:bb:95:
9d:49:da:ca:09:09:6e:13:09:54:7c:2e:ee:7b:35:39:48:dc:
a0:c6:87:b0:34:c7:6f:18:1d:44:ae:c8:7d:3e:56:19:4c:4e:
02:c4:b0:7b:eb:18:7f:8d:0e:82:5b:8a:56:9a:3b:63:bb:67:
95:d6:36:32:b5:5a:a3:f6:ff:0f:ee:5e:bf:c1:b0:3a:55:73:
3b:db:9c:d6:15:f9:e8:26:f6:bf:f4:c3:41:88:6f:12:35:2a:
36:62:c4:cd:1f:67:b3:14:25:a7:ca:e7:02:fd:9d:31:96:36:
dc:74:f3:4a:d0:62:e1:64:d2:da:87:19:1f:6c:07:fb:64:08:
6a:1e:dc:a7:d0:db:1d:36:3d:ac:68:a4:d5:7f:1a:e1:b8:6a:
3b:f5:cf:d7:42:29:41:ad:47:39:16:58:29:e9:bc:3f:6c:93:
f8:7c:2e:6b:74:48:e0:4f:f5:50:e6:74:e3:dd:46:14:c8:34:
a2:b0:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:47 2025 by rpki-client