
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: r12l7YvUJ+REJ56aohtKX5DpawpsXv02m3kR4c/jJzY=
Subject key identifier: 1B:E9:1E:B1:B8:0B:17:23:06:17:F8:52:5B:C9:4B:BA:DC:A4:24:68
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0199FAD7EE1897806CF502CD6293AEFC36F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 07C3
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: lesAAIyc4S92buvEs8ilM/M0rGUkQYKskVIxChBEEts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ee:18:97:80:6c:f5:02:cd:62:93:ae:fc:36:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=1be91eb1b80b17230617f8525bc94bbadca42468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:2e:4e:3c:f2:2e:e7:4a:f1:c3:06:bc:19:
39:ee:e1:d6:97:b1:c4:15:4a:b0:f2:a9:b1:f2:6e:
3e:37:57:e4:93:6b:dd:50:8c:0e:c3:fd:ba:88:76:
7a:e6:eb:6a:f4:d3:90:42:b4:4a:ca:c1:58:57:4e:
78:05:60:cf:de:46:f2:56:10:a1:b2:95:18:5a:91:
a5:b1:3a:62:8a:5f:2c:f0:2d:50:78:31:7c:b8:f6:
8d:b6:1c:06:52:42:df:84:08:e8:aa:2a:05:1d:40:
3b:f3:a3:14:0d:84:27:9d:e8:5b:18:0e:52:22:c2:
1f:e7:f9:0e:1b:06:a0:43:39:15:77:c6:ad:b4:1e:
65:97:79:e3:5a:8b:78:ad:2f:63:b3:fc:09:fc:21:
08:a5:49:96:ef:05:45:9a:64:47:6c:e0:a9:f0:cf:
20:78:7b:b2:55:d9:5a:c0:14:82:b3:34:52:45:17:
a4:fd:12:52:aa:fa:31:52:e8:7f:11:91:e9:58:cc:
25:e1:b7:62:17:b4:38:27:1b:bb:03:49:38:18:0b:
b1:bf:38:1e:d4:e2:96:29:a3:26:d3:c3:c3:7f:bd:
00:cc:b3:58:6e:aa:5f:f0:99:c9:d0:4a:ea:71:c1:
bb:9c:6d:e6:dc:5b:e5:94:b9:22:76:70:4a:6a:62:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:1E:B1:B8:0B:17:23:06:17:F8:52:5B:C9:4B:BA:DC:A4:24:68
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:3e:22:44:c0:ef:36:d0:45:7d:bd:85:9e:7a:42:57:bf:
20:80:75:40:12:45:a2:16:bb:ea:30:00:c1:dc:e0:23:6a:c8:
29:5d:8e:e4:f3:d1:73:e3:30:de:76:b7:39:68:12:c1:01:94:
86:69:8c:eb:01:ed:09:88:2f:f2:6a:7b:43:18:27:1a:c6:6a:
1a:30:b3:6e:02:24:56:42:aa:9f:68:af:fe:b6:09:9a:59:cc:
be:02:36:9a:90:01:e0:ef:d3:b8:ae:42:0e:75:dd:30:3f:30:
74:86:a3:ce:07:48:58:d4:0f:88:09:b6:82:55:f9:20:d3:7a:
15:41:eb:ec:fb:96:1f:4c:2e:fe:37:42:6e:77:91:e7:29:47:
6b:e2:e6:99:b4:c1:c2:cf:f7:f3:c9:b5:78:99:a6:41:44:2c:
d2:a9:03:94:e2:81:7f:4a:0f:ae:58:9f:0c:e7:9e:08:8d:a6:
b3:5b:8c:0a:09:79:42:00:ac:5b:48:ea:27:76:7f:09:7b:83:
3e:c6:3f:ef:3d:c8:90:a9:0f:53:48:b2:08:e2:65:3c:22:2f:
5b:7c:ba:b4:3e:9d:fc:a0:90:9f:10:37:bd:6f:b8:ee:75:d3:
2f:21:c0:63:d9:59:95:d0:af:c3:11:60:d8:6e:77:d2:ad:8f:
80:ae:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:23 2025 by rpki-client