Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: GSW4WQQovGQ1kH9bTz06E6HMuXCQf4WzIYudipkl3/o=
Subject key identifier: AD:8C:98:25:60:F7:22:3B:1C:72:FF:3C:F5:C8:F8:FA:1F:E4:51:D8
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 0199FBEBC7C0FB77E09D479E7EC1497BF6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 120A
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: WBfw1vw2rgoyI+z0P7PV+Dt+lwQrUR45RCNuTs5XsUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:c0:fb:77:e0:9d:47:9e:7e:c1:49:7b:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=ad8c982560f7223b1c72ff3cf5c8f8fa1fe451d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:dd:81:ae:99:bc:96:a3:c7:2c:b1:11:08:
7a:64:ff:b5:1d:b5:56:f4:f0:c8:5a:75:6e:0a:59:
07:23:8f:a2:d1:b7:05:11:12:ab:86:7e:cc:55:5f:
f6:69:42:99:b4:84:3b:5d:6b:80:3a:fc:d0:c3:1a:
d7:f6:c3:f0:d1:db:9e:15:6d:6c:c6:9c:77:75:08:
b1:f9:41:b0:8a:56:8d:b4:bf:72:e8:fa:b3:fc:0f:
eb:ff:89:be:32:71:40:12:c8:62:a5:b4:91:95:5e:
e3:38:bf:1f:20:bd:22:e9:0c:c2:01:a4:bd:c7:a6:
0b:3e:56:f2:f5:e4:c0:ae:9b:84:48:12:8c:2b:e9:
8c:11:c3:74:92:f2:ae:85:83:ff:e6:88:2b:75:3d:
1b:1d:de:95:15:62:bb:af:9c:9b:04:73:38:0f:13:
9d:f3:6b:d2:b8:9c:fe:e3:b5:b8:a8:3f:fb:9f:77:
b1:6c:52:61:06:74:68:2f:27:1f:87:d6:17:36:ee:
d5:18:d7:c9:a5:5b:b9:97:80:a7:45:18:2a:47:a1:
18:c8:fb:c4:c6:54:89:6e:e0:87:69:87:d7:80:88:
e1:6a:81:36:18:75:3f:5b:c2:f6:61:14:61:11:6b:
5e:80:de:11:3e:94:dc:03:e2:ad:7c:47:31:6a:46:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:98:25:60:F7:22:3B:1C:72:FF:3C:F5:C8:F8:FA:1F:E4:51:D8
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:12:38:3a:e7:fd:f2:0c:4c:9b:62:a3:c8:90:f8:9c:f0:
ca:7d:bb:8f:73:13:c0:98:11:95:c5:9c:16:39:42:fc:72:05:
aa:ba:d5:fd:ad:4d:10:c9:92:90:9e:d3:dd:c1:0d:d4:5c:39:
a4:d0:c7:fb:9a:6f:2f:e3:a7:97:6f:3a:c5:72:98:e6:9c:c9:
e9:14:2f:d4:90:34:84:fb:73:74:69:d7:36:01:dc:e2:eb:df:
17:f6:ca:27:21:a8:5e:b5:56:a3:c9:07:35:1f:f3:0c:9c:da:
9e:7a:b6:80:a1:da:b6:4d:04:53:c0:5f:c4:d2:97:85:e2:b9:
c8:43:2e:4c:f6:4e:d2:fc:b5:e0:9b:b3:70:25:33:e8:6d:53:
57:69:5a:63:1d:21:cd:71:74:d9:1c:96:38:85:ca:78:e3:e5:
f1:14:34:79:32:2e:2e:92:8a:58:4d:24:d6:45:08:6a:8e:49:
eb:9e:08:5b:d6:f1:bf:89:37:8c:f4:c7:f2:e4:e3:04:e1:8a:
15:53:82:1c:c2:03:cb:d5:56:b1:68:da:43:bd:bd:8d:49:ab:
ba:f5:84:f9:f7:20:e9:19:f1:47:d5:93:26:c6:ab:1e:aa:2b:
ab:45:70:71:8d:51:e1:07:08:fc:0f:02:1b:a9:b8:40:e5:27:
5d:ac:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:00 2025 by rpki-client