Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: OkG34PoZxUlUsLMKhlwXwpT5vkRJMK3i9NjAsHVeBrc=
Subject key identifier: C4:3F:8F:B2:43:1E:3D:16:1E:A7:B0:01:7A:01:83:83:C3:8B:EF:D0
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0199FC216EAF3D5DEFFF5874699DDA6318F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0DDB
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: NpCsCezmDNe3LIC1bn6Ly4+s0Kl/L2l5rShYU/MXk8k=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6e:af:3d:5d:ef:ff:58:74:69:9d:da:63:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=c43f8fb2431e3d161ea7b0017a018383c38befd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:da:99:bd:5e:a9:94:ca:df:95:b1:44:60:
37:e2:02:ed:f3:41:d9:0d:67:b3:65:fc:5f:a2:2e:
9f:5a:f1:4d:a6:0b:d4:47:2f:dc:19:3a:3b:c4:86:
e0:20:ea:cc:86:d7:fd:55:d2:c9:27:2a:06:c0:98:
11:15:93:95:f1:51:ba:7b:03:89:6a:5e:db:41:86:
b9:f1:a0:68:d7:b7:fa:58:55:ef:ec:f5:dc:ba:f7:
3e:43:9a:5d:3e:14:8f:7c:95:61:84:57:ad:30:ef:
97:33:91:da:54:c9:c6:81:d2:48:bd:d4:cc:ce:03:
b7:3e:27:dc:b0:e3:91:12:9e:82:94:71:27:20:8d:
ef:07:be:e5:6a:24:ac:20:12:5c:c7:90:ac:3e:4b:
d6:93:da:83:e1:8b:dc:6e:30:e9:ed:fe:ae:3c:51:
1b:2c:3e:8b:09:c5:b4:22:6f:02:b4:b7:d7:94:c6:
02:78:18:6c:6d:da:c0:d1:61:46:71:96:33:43:09:
4b:b0:4b:99:1d:91:a6:7e:7c:c1:26:aa:9b:1d:c9:
e8:99:a8:0c:9d:4a:07:97:75:9d:42:e5:45:3c:8e:
42:b6:b8:eb:60:ef:5a:f9:51:e2:28:3b:e2:b3:fc:
d5:f4:88:6c:e5:e6:50:b4:44:1d:2c:08:a2:e0:b3:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:8F:B2:43:1E:3D:16:1E:A7:B0:01:7A:01:83:83:C3:8B:EF:D0
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:af:bd:75:42:11:51:cb:37:48:5e:bd:4d:76:db:f0:da:
07:1f:aa:fe:b4:f2:08:0b:1d:0b:78:5e:85:0f:a3:ef:32:72:
65:af:11:27:70:0d:92:89:a1:ab:64:87:7a:85:62:dd:34:04:
5b:36:04:ce:ab:b6:96:54:e2:f2:c3:7c:0a:1f:89:55:5b:c3:
60:b0:7c:49:cd:51:1a:02:f6:d7:bc:4f:a9:5c:cd:38:d2:8f:
60:bd:d8:6f:79:7a:f7:69:12:78:67:40:09:0a:c0:42:14:4c:
d3:5c:09:26:bd:6c:ae:fd:0f:8a:57:1e:6f:d9:6a:77:7f:6c:
8d:ff:ec:10:ee:79:5c:da:31:0c:aa:98:03:56:67:e6:d1:3e:
4f:41:66:40:75:71:fa:ae:b0:2f:0d:e3:ef:46:55:fe:15:ba:
0b:32:84:7a:b1:92:08:dd:be:74:4b:b3:2c:e3:1f:ab:2d:87:
15:32:0d:fa:d2:bb:01:93:ba:e8:85:dc:d6:53:c7:1b:e5:1c:
7b:5c:4b:54:05:17:80:7b:0d:0c:09:93:be:89:3e:f2:1e:d4:
f0:38:5f:f0:4d:c2:40:5d:96:8c:50:46:7a:c0:dd:02:30:d6:
40:95:2a:15:e4:13:89:89:e9:78:e1:56:cc:06:7c:11:cd:d1:
e1:bd:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:15 2025 by rpki-client