Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: YzSbBFHtCF+Pt30/GFiDpC1xu/ef+QV7xLQaqfz/LGE=
Subject key identifier: 12:E1:FF:7A:C7:CD:6D:8B:B6:8A:D9:A4:70:61:E1:E7:34:73:A1:B3
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 019A7226693B57C15675FD790F4EABE17A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 0553
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: ok5pb2+3kSpE+G7JcLgcwJz+T4kPSCF766OvLqdn3SA=)
2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:69:3b:57:c1:56:75:fd:79:0f:4e:ab:e1:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=12e1ff7ac7cd6d8bb68ad9a47061e1e73473a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:2a:8c:a1:98:a9:0d:78:85:16:ad:95:e1:
3b:b1:1a:5a:a9:e8:ae:67:62:d6:d3:a1:1f:15:b5:
b5:77:8d:2f:c1:45:5f:4e:06:7a:90:7c:82:a5:ab:
d3:c4:be:a2:2f:cf:82:f6:a9:d1:77:05:40:c5:a7:
4a:8b:67:40:89:5b:2a:3c:d5:4c:73:dd:eb:7a:65:
13:f1:75:79:0a:05:de:81:0a:bc:7f:27:00:ee:1b:
57:07:95:47:f6:0d:17:e7:d3:ab:ed:44:c8:e7:6f:
5f:ef:45:47:25:5d:ea:66:28:b2:45:b3:fc:72:64:
75:75:0d:d7:a8:b3:d0:79:b9:39:48:62:a4:80:79:
48:88:8f:7a:4e:b6:31:3c:f4:82:d3:29:62:7d:c5:
c6:77:3b:86:4a:d9:f8:6a:88:47:a2:2b:eb:df:1c:
ba:d0:8c:19:93:cd:c7:ee:39:f4:8b:75:60:7c:96:
4c:e5:a0:0a:36:af:fb:92:dd:0d:d5:59:70:21:fc:
32:0b:1a:13:6f:88:d0:22:5e:5f:66:d7:ca:b4:72:
29:92:16:b5:06:2f:e3:fd:db:1e:64:d5:45:9a:00:
7a:1f:4b:8c:61:4b:27:30:f9:26:bf:a6:ce:b1:7f:
f3:fe:bb:3b:a3:16:79:3e:f2:0f:bc:3c:89:c4:2a:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E1:FF:7A:C7:CD:6D:8B:B6:8A:D9:A4:70:61:E1:E7:34:73:A1:B3
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f6:52:be:69:f5:8e:6d:ea:e1:fb:5c:74:58:51:6f:4c:9a:
59:83:5e:b5:a1:29:91:fe:05:89:0b:66:d0:3d:e7:e8:ad:13:
50:59:95:82:1b:5a:2a:65:75:42:e4:9a:39:1e:f8:15:7d:a3:
61:12:5d:b8:2e:24:d5:b8:86:38:c3:a7:cc:ad:a8:29:35:d8:
e3:c5:e2:3f:7b:33:4f:29:1d:ec:93:71:32:a3:ea:f9:55:29:
66:2a:c9:3f:3d:4d:fb:e8:2b:b2:b7:0e:18:84:2a:71:c4:32:
66:a8:a2:74:ce:04:c0:43:c8:4d:25:ea:04:15:fa:9d:99:64:
30:39:be:8e:9b:54:a6:8b:26:f3:22:35:ea:37:e5:26:80:64:
d9:f6:2e:07:14:77:d5:db:c7:01:4d:c7:08:82:73:4d:d2:52:
9c:a0:f7:37:5a:27:c4:e7:9b:da:79:d8:e2:98:2b:58:49:c9:
21:92:8f:bd:20:79:fd:53:fb:9f:35:c8:b2:46:98:c3:48:50:
d4:16:38:03:da:18:57:f4:60:cd:c8:df:03:4a:e2:bb:7a:5d:
46:d1:ff:78:a7:7a:f6:5b:b8:90:15:81:7d:0e:a6:64:b1:6e:
f4:5c:fa:2d:f3:ac:36:32:fe:53:ec:4e:27:ff:69:22:14:1d:
9e:8e:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:49 2025 by rpki-client