Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: AGWDk740/7umNcRSriYWqz7mom1CEHMxEMnKkD4PUrY=
Subject key identifier: 92:D8:19:F1:67:E1:9C:E8:D7:4A:CF:06:86:02:01:4D:87:76:4E:65
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 019A725CD1A98BF9450585582578D1163433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 1433
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: 5RzglhRq3j5hzdNctXhdzWv/iQ9soXTxTGiz6mFQ6uE=)
2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d1:a9:8b:f9:45:05:85:58:25:78:d1:16:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=92d819f167e19ce8d74acf068602014d87764e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:aa:4c:2b:18:a8:83:ca:a7:7e:cf:8f:b1:
97:a2:d7:05:e6:fc:fe:16:7f:7e:94:8a:f2:a9:33:
8c:4e:12:ac:99:d6:22:eb:85:3b:22:d9:64:b8:c1:
ff:3e:a6:e8:6b:43:2c:1a:68:10:23:2e:9a:b6:3d:
cd:e1:62:4c:7c:b2:7f:5c:56:2b:1e:6e:aa:81:e9:
03:be:af:f7:b4:19:31:00:96:f3:71:21:5b:0c:7c:
87:bc:5c:b9:4b:29:81:e5:40:38:a4:0e:01:c6:24:
c4:6e:a6:5b:1b:7c:d6:ba:8b:ec:de:d5:51:98:c1:
eb:83:f1:79:53:73:44:8d:96:4b:5d:fb:b3:2c:fc:
09:f4:8a:84:f6:7f:63:6d:a5:c2:2f:b0:31:94:c1:
77:b1:89:02:6b:0e:c2:2a:d9:9e:e9:1f:22:1c:3c:
28:56:5b:f9:7e:04:20:62:fc:6f:b8:b1:23:9f:1d:
4c:87:c1:70:5a:2e:55:19:0c:29:c6:c0:e8:02:e0:
65:ff:14:97:6e:20:70:c8:83:6b:a6:68:c7:c0:f9:
8c:d9:49:33:97:ee:ff:cb:07:51:2c:44:55:d7:c5:
6a:98:94:0d:e7:b6:a8:35:27:ef:16:29:04:7d:69:
f4:1b:7d:16:e2:7c:98:65:1a:81:fe:e5:5e:3b:f4:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:19:F1:67:E1:9C:E8:D7:4A:CF:06:86:02:01:4D:87:76:4E:65
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0e:60:95:f2:0c:f7:c1:fb:63:32:f8:94:6b:ab:a8:db:22:
5e:2b:d6:a2:6a:db:48:4b:3e:7e:e7:a0:ed:2c:e4:90:60:a3:
41:57:3f:18:7a:16:ea:9a:67:e9:da:1c:9b:62:5c:63:8f:09:
53:19:82:6c:4b:f5:c0:e4:fe:41:d0:9d:58:3c:7c:cf:78:1d:
44:2e:83:36:0b:c1:13:d9:b0:c8:cd:7e:3f:a0:bc:3f:d2:5e:
1b:f3:4e:f3:46:0f:cd:ee:a6:4b:6e:e4:44:87:00:54:aa:37:
8a:62:82:b4:f1:52:59:53:ba:7a:1c:d3:71:97:03:aa:11:da:
fc:d9:cb:0e:d8:88:d1:72:d9:fe:96:1d:01:a8:a4:96:2d:84:
fe:b4:15:62:07:5a:2d:9a:09:a2:f8:f1:90:95:59:e0:0d:55:
f2:58:a9:53:40:fb:c6:3f:70:6f:f2:01:62:c7:33:2c:18:55:
40:96:82:70:07:e3:b5:ad:2d:d1:d9:dd:9c:ea:1f:a7:8f:d2:
21:04:aa:e7:1b:da:91:71:eb:c6:48:ad:2f:0f:9f:51:5c:bd:
24:5c:ac:de:c9:73:67:a5:b6:ac:b1:b9:1d:2d:6b:c5:a5:ec:
7d:db:64:09:b7:f1:4c:b4:7f:2f:e8:e6:f7:fb:11:18:64:58:
0d:47:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:23 2025 by rpki-client