Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: aaQg6v8SCs/i+5u5Fl0Mu6KJAvx2zq4hJxFbeaep6z8=
Subject key identifier: 3F:5B:55:E7:38:9E:00:7E:5D:7C:BA:21:16:8A:7B:D1:F3:75:9C:91
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019A2A79C35957EE64D491EF9768F472956E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 168B
Signing time: Tue 28 Oct 2025 11:00:13 +0000
Manifest this update: Tue 28 Oct 2025 11:00:13 +0000
Manifest next update: Wed 29 Oct 2025 11:00:13 +0000
Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: losQk5cf5gU6yeaa9HAXjIecZWYYCRvD3LYhUgdN9yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:c3:59:57:ee:64:d4:91:ef:97:68:f4:72:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Oct 28 11:00:13 2025 GMT
Not After : Oct 29 11:00:13 2025 GMT
Subject: CN=3f5b55e7389e007e5d7cba21168a7bd1f3759c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:a8:82:c9:0a:3e:63:80:9e:72:7f:79:e2:
c9:62:71:7b:2c:87:1e:d5:5d:9f:db:53:01:66:fb:
16:e5:e9:1b:b6:19:94:04:4a:ce:26:01:72:28:ec:
02:05:29:7d:f1:ba:db:ae:83:f1:4f:7d:ab:01:80:
46:c8:c8:a1:62:7d:7c:d1:8c:b2:c8:27:f9:2f:95:
95:af:73:d2:87:6c:73:6b:53:08:9e:e7:cc:a0:c5:
5f:c0:a1:5b:16:c8:a9:e1:3c:02:09:ca:a1:1e:e4:
fb:e9:c6:b1:a0:4b:cb:05:50:7c:09:bf:4a:c2:5e:
d6:68:09:06:72:60:e5:8c:86:83:eb:03:a0:8a:b8:
38:c5:8c:90:0f:72:c9:ac:e8:87:13:87:53:8f:37:
33:09:f0:e8:cd:5b:52:81:85:d1:9b:37:3d:4c:c3:
77:5c:3d:df:55:2b:6a:7a:9a:6b:a4:78:1e:c1:9f:
22:e6:f5:5a:c5:69:02:2c:68:53:dc:7e:50:95:5f:
c8:34:b0:8f:79:70:aa:e9:40:9b:ad:e5:e3:e9:d4:
21:30:33:fd:cb:e1:d2:48:72:33:ac:9a:a4:a8:75:
eb:0b:b9:2f:c7:34:2b:65:97:1d:6f:2d:5d:d1:48:
81:4b:e6:04:ef:2c:7d:e0:03:74:b1:3b:2e:52:a3:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:55:E7:38:9E:00:7E:5D:7C:BA:21:16:8A:7B:D1:F3:75:9C:91
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:af:30:17:62:a5:44:bf:35:8a:a9:f7:19:d4:23:08:32:d2:
f7:7d:37:2b:e6:fe:11:b3:ee:f7:1e:a5:73:f3:40:40:89:80:
17:c2:5a:b7:4e:7a:0a:6d:8b:75:69:d2:de:69:02:bd:8c:0d:
16:23:b4:67:d7:c3:1f:20:87:80:2b:af:08:4b:04:c0:9c:95:
b3:e8:88:dc:7e:b0:d2:56:3c:c1:67:8a:61:76:61:b8:d6:87:
d0:19:72:fa:7e:48:58:b9:54:6d:ce:0c:c2:7e:16:f9:bd:3d:
f9:b5:b0:8c:11:e2:e8:75:0c:a6:b5:90:9e:b4:50:a5:a9:90:
70:31:fc:90:8b:0b:d4:16:74:8e:72:1a:4b:dc:f7:24:ba:41:
00:a9:2c:9d:71:63:af:f2:56:f2:0a:b3:6c:dd:20:cf:56:6a:
7e:49:da:69:41:64:44:bd:94:6d:41:8f:68:17:83:78:1f:d9:
9b:8b:d8:36:56:2e:b1:eb:ba:16:81:3a:a6:cb:9c:82:16:de:
a6:8a:a3:9d:a0:75:da:3e:5c:4f:02:da:84:a3:d6:b3:4a:1a:
ad:8d:3d:c0:db:c1:c3:05:b8:22:93:77:9b:78:f7:4f:2a:a9:
97:ca:48:6c:f9:ee:a5:5d:1c:f0:ef:eb:6d:cb:6c:bc:2c:d4:
e2:42:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:39:09 2025 by rpki-client