Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: TFa4lEatH3V7Kl7MnL8D5PkS531U9LWfOJ5P8o0vEVE=
Subject key identifier: 68:BC:D2:8A:AE:D4:FC:15:6B:5D:8D:67:CA:47:4A:59:66:74:A3:6C
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 0199FDDA188569C0FDF1A0D9CA69B830055E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 0643
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: intny6+ZMUqsVFan0e3LyynvjVH7zDNUeA/KSghp3y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:18:85:69:c0:fd:f1:a0:d9:ca:69:b8:30:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=68bcd28aaed4fc156b5d8d67ca474a596674a36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:86:63:1e:52:56:3b:aa:02:af:65:76:4f:
65:11:84:24:cf:c3:fd:33:40:1e:fb:1f:7d:bd:84:
44:48:8e:cc:f0:b3:1a:54:b2:04:12:8d:75:93:dd:
a6:5f:13:c8:30:f0:cf:92:0d:ad:70:e8:6e:47:0b:
7c:83:94:0c:d3:a7:f2:bb:07:0b:8f:b6:3e:7c:55:
6c:a8:6f:03:75:cc:f1:2e:09:24:4f:31:e1:67:2f:
d2:33:04:2e:08:40:16:ea:45:55:77:18:e7:c3:41:
08:51:6d:ed:61:e5:b9:92:6c:64:33:b7:20:4f:f0:
be:68:20:5f:11:58:ce:6c:e9:9f:81:3e:96:7d:bd:
ee:af:9d:43:88:6c:5d:5a:51:73:0a:fb:fc:d3:d7:
3f:7f:59:4e:31:2d:fe:ee:5e:2c:b3:a5:25:28:5f:
ba:9b:f6:d4:b0:b6:be:db:98:0f:36:bf:95:b2:0e:
51:1e:27:2f:bc:7a:6b:49:15:84:04:91:1f:d4:e2:
8e:79:16:1e:2a:2d:f3:ac:f1:a1:93:92:66:41:e7:
4e:68:d2:67:85:1d:78:cb:06:7e:de:3c:cb:25:1f:
07:16:99:be:7a:4c:be:84:ac:d1:7d:aa:0e:26:84:
24:1d:5e:0d:16:5a:8c:71:84:76:41:35:14:4c:15:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:D2:8A:AE:D4:FC:15:6B:5D:8D:67:CA:47:4A:59:66:74:A3:6C
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3c:c3:b2:dd:a3:8b:a6:9d:77:79:32:48:2d:7d:07:f0:12:
ba:75:50:8d:17:98:07:90:1a:10:34:10:45:17:96:ad:05:93:
3c:5c:90:76:3a:f2:a2:4a:e6:4c:cd:aa:d1:95:f4:1a:96:c6:
21:4e:b4:7b:5e:32:98:e6:7b:d1:70:b8:4d:89:f4:ec:15:d1:
70:08:eb:40:4c:e9:39:a1:51:5d:2f:f3:37:3c:c8:9a:a0:5f:
42:63:2f:4d:a8:51:89:92:75:32:1e:a5:dd:6f:db:d4:80:59:
8f:68:72:b3:e5:79:64:b2:72:fe:dc:66:70:ca:12:c9:a0:99:
c1:06:cf:dd:5d:e9:af:7e:2e:03:fd:b4:c7:6d:56:cd:02:e2:
53:f5:d4:c6:60:da:ac:7a:0c:aa:2b:7a:05:95:85:6a:23:bd:
93:74:44:bd:eb:88:1b:f1:6b:40:ee:56:01:1f:57:47:00:43:
46:df:fe:d3:9a:6e:67:14:37:56:4d:68:4e:da:19:76:16:bd:
d7:d5:b9:05:4f:0b:76:41:c5:75:ed:a4:6e:79:ea:b0:ae:ab:
48:a0:25:6d:80:47:8b:e9:98:db:05:0a:41:72:ff:9c:04:64:
1f:f3:b9:b1:0b:cf:16:8a:e5:62:c2:a2:ca:7f:40:a1:20:ff:
49:48:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:07 2025 by rpki-client