Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: jsZ8sNhKIZqCbm0tomWue8lPrqwgx3klccggF61ppRk=
Subject key identifier: 0F:90:BC:A0:21:A6:71:E8:A5:D5:3F:64:D0:EE:89:C9:96:7D:7D:CD
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 0198D54E70CD8CF3BF6159087079E6A32DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: PsxTsjIlM32kp5Cf88PCD0aD2O7cdHBuRvU1pjW+WY4=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:70:cd:8c:f3:bf:61:59:08:70:79:e6:a3:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=0f90bca021a671e8a5d53f64d0ee89c9967d7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:25:1d:8c:ee:45:d1:21:d6:2c:5f:6e:34:
04:26:5f:cb:30:54:00:28:47:c9:50:c1:3d:6b:7d:
48:4f:88:c1:36:b0:45:4c:e4:bd:8f:36:91:84:ea:
f9:0b:d5:f0:76:d5:eb:cf:d4:ea:04:6c:e1:a3:45:
cc:33:87:ff:a7:93:bd:a8:91:9f:91:62:94:f1:ba:
75:cf:35:35:73:c9:d9:cc:7c:1e:3a:c6:cf:87:2b:
f5:de:12:94:d7:60:d3:7d:df:23:ed:e5:76:25:84:
f1:df:15:5d:e2:75:b3:b9:25:26:1b:3b:28:24:5a:
2e:7f:a7:c0:5c:54:b4:2b:9a:2f:30:14:33:c0:7c:
3a:61:12:e4:db:76:55:ef:8b:75:63:d4:db:43:ba:
fe:13:5a:e3:15:ab:95:52:1f:4e:41:99:0e:fc:ee:
af:35:ac:ca:35:dc:90:3a:e2:83:ed:7f:8c:d8:16:
08:6e:31:4c:a4:c1:dd:51:04:1e:60:6e:9f:9e:a2:
6b:38:d5:27:99:bb:29:c7:58:63:c0:7f:5e:9a:3c:
01:fb:16:9d:be:09:bc:6f:f3:29:7f:1c:54:ca:cc:
fd:47:9c:29:9e:c2:76:53:4d:4f:d5:e1:8c:58:e3:
87:bf:e4:46:fa:93:19:87:b8:13:1b:75:7e:b6:27:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:90:BC:A0:21:A6:71:E8:A5:D5:3F:64:D0:EE:89:C9:96:7D:7D:CD
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:2e:33:2b:9c:ae:a7:c0:a3:14:2a:37:3a:71:f5:c4:02:
9a:27:e7:ac:66:92:4c:02:53:f8:66:f6:2f:99:14:29:13:a0:
81:93:ce:3e:60:cb:19:b0:9a:d1:82:79:af:37:f9:27:a7:02:
4c:ec:c6:31:65:30:7d:1f:f4:ca:3b:06:61:bb:96:5c:0c:34:
d1:a1:56:8b:55:05:32:2b:4a:52:9e:9e:86:b9:47:40:2d:b6:
ba:cb:8d:8d:7f:65:0d:47:34:b6:18:06:79:bf:48:78:97:e0:
fe:09:5d:73:af:b6:17:a1:1e:b3:7d:67:e3:9a:81:9d:00:6f:
69:91:f7:1a:14:33:6f:47:46:1f:3e:71:6b:83:ab:84:1d:bb:
d1:40:d1:45:b2:c8:2b:0e:47:4a:d2:f1:da:a2:f9:11:24:ce:
73:c5:be:a5:79:9e:34:b8:d8:8e:b5:ad:8a:5b:66:54:d8:4a:
e4:3a:d1:43:58:dd:8a:25:ef:1f:13:b0:e7:9d:ed:33:50:20:
1d:3b:45:d6:37:3d:68:a2:ab:35:ab:98:8e:58:03:7a:e5:e3:
d7:cf:c1:5d:a3:53:67:39:b4:15:b0:c9:9c:86:50:f6:eb:bd:
43:32:d7:4a:d8:5e:bc:f1:e5:d2:04:b4:34:97:c9:09:aa:a7:
ff:93:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:53 2025 by rpki-client