Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: hm54eQ/f/hCvB2kx7bzv4tB0D5lj+QZ+V/J1xjpJoeA=
Subject key identifier: 37:BD:33:B9:EC:08:44:BE:A5:0D:75:FC:4B:B7:5C:E5:7F:48:0E:49
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 0199FBB368736342F7A775BE4F91DF002C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 127C
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: OUc5zr+Ufebd3IyD0cYgmlH5OjQfK6OVuZXR1jFEbEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:68:73:63:42:f7:a7:75:be:4f:91:df:00:2c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=37bd33b9ec0844bea50d75fc4bb75ce57f480e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:f3:f0:20:9e:fc:f0:fa:87:57:6c:b6:87:
b5:a8:e2:ff:61:5e:97:3f:bd:ee:cd:34:dc:08:98:
30:f6:f2:bb:ca:80:0a:38:4a:ba:cb:79:ab:bf:a9:
1c:f4:23:a2:ec:c4:a2:83:25:d1:f8:db:e3:5a:8b:
5b:1d:ad:f7:8a:25:b9:06:de:97:ed:ab:e8:3c:dc:
c0:ac:dd:b8:82:01:3d:63:07:e3:ab:86:7e:90:27:
ca:8d:c2:0a:6e:13:b0:3c:bc:c6:19:9d:bc:9a:85:
de:39:b6:22:f2:20:07:1b:a9:46:a1:6f:36:cb:08:
ce:52:0f:68:3c:c9:09:4e:07:88:d1:85:61:59:87:
86:ba:e7:d6:3e:a5:06:f2:12:a6:19:d6:85:ee:2b:
c4:bb:f9:60:c3:9b:fe:89:20:34:c4:3f:2c:e5:5b:
5b:6c:4d:70:5e:ad:50:fd:aa:7d:b8:86:a9:97:f2:
80:e7:a9:0c:54:a4:18:e0:fd:48:9a:d0:d9:1b:ea:
cc:ea:71:68:99:c6:90:41:87:83:1e:66:a5:31:22:
62:cd:41:88:9a:8b:fd:32:4b:17:b5:72:68:c3:98:
da:05:12:38:17:8e:47:a2:59:27:f0:fa:4a:74:86:
6d:cf:00:d2:c9:38:5a:be:21:1d:60:6e:eb:59:05:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:33:B9:EC:08:44:BE:A5:0D:75:FC:4B:B7:5C:E5:7F:48:0E:49
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:25:0d:89:05:56:5e:f0:0f:06:31:bb:61:6a:3e:41:2f:
8c:c3:76:9a:d8:95:2a:09:27:51:3a:af:13:78:87:e0:69:91:
9b:bf:70:71:9d:8b:16:70:6d:db:c3:f9:3d:3d:1c:50:ca:b0:
b8:de:00:98:a9:ed:33:42:be:17:13:10:8c:04:56:0a:8b:a5:
cc:18:19:30:81:63:53:26:20:51:5d:96:9c:de:8e:8f:09:d9:
a0:44:e0:17:1a:de:76:67:ff:4a:ca:d3:5f:5a:16:7c:8b:2d:
f3:f3:d6:52:c6:9b:d3:4e:8e:ee:ff:c2:78:e8:e0:ec:88:f0:
b7:98:52:73:a7:5e:3e:22:ce:24:ed:12:4f:69:df:74:a6:b5:
b7:39:d9:1b:87:d7:34:0c:51:c8:f6:c4:a8:0f:84:30:17:2b:
aa:2c:ea:d8:63:eb:3e:ee:07:cf:6b:cf:f1:66:fa:dd:be:33:
ea:ac:22:11:16:35:2e:c0:4b:09:29:08:38:2c:6d:c9:d9:75:
e2:5c:f4:6b:8c:c3:64:08:3e:4f:ef:c2:df:9e:6d:18:c1:04:
78:03:61:1d:2d:cc:4c:75:56:f7:d0:a6:04:9e:16:4f:35:62:
ed:3d:e0:7e:0a:4b:dc:c7:01:98:cf:df:62:5a:43:b0:4f:9c:
79:8a:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:42 2025 by rpki-client