Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: VGAiAyYy3p8yMI+5nhsNnDmYWLM4t7LZdomkahC3XC8=
Subject key identifier: 6C:94:B0:5D:9A:B1:FC:A7:B5:20:01:FD:15:0F:B9:C9:80:57:22:57
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 019A72CA5A966A5FAA355B69623ED2D96688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 065B
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: dlVXiT6CikVxnjtoEpewb1QzxS8eOFVbiPC08NkKNtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5a:96:6a:5f:aa:35:5b:69:62:3e:d2:d9:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=6c94b05d9ab1fca7b52001fd150fb9c980572257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:ad:e9:4d:cb:de:eb:c5:d0:ed:99:08:af:
8a:bb:aa:8c:45:35:1c:87:90:d8:ea:00:41:76:38:
b2:20:a0:de:57:55:d2:f5:70:0f:d9:15:cc:49:b0:
17:43:70:86:9a:b4:b8:d1:41:2f:78:1f:ca:40:e3:
9a:c1:35:42:aa:36:d8:f5:78:ad:4f:34:03:c3:d1:
88:ae:65:49:fb:87:dd:fa:d5:1c:3d:20:04:c9:06:
2d:4d:93:9a:01:96:5a:ea:d7:05:8e:c6:07:ce:b5:
bf:88:4e:f3:d4:40:07:2a:8e:76:d0:9f:7b:e5:02:
6c:f8:ab:12:19:5a:57:92:ab:73:34:38:0c:40:b4:
10:9b:a3:f9:65:02:09:63:e8:de:a8:2a:0b:28:6e:
ae:2e:13:c7:11:d4:09:c4:5a:e5:26:90:2a:0f:f6:
c8:19:6c:fa:f5:a3:f9:9b:da:02:61:83:c8:c7:10:
12:2c:fe:1d:e3:59:68:84:00:0c:9b:41:44:55:52:
e3:ff:a5:64:cc:70:74:a1:b0:d0:69:82:d3:d4:38:
50:34:ff:21:8c:e9:86:52:09:41:e7:ad:e3:63:50:
00:44:8f:bc:44:57:44:11:e5:fe:89:59:d4:79:d7:
05:1c:f7:b5:4f:f3:84:0c:ec:7d:92:50:51:14:b2:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:B0:5D:9A:B1:FC:A7:B5:20:01:FD:15:0F:B9:C9:80:57:22:57
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:92:be:57:b7:ea:75:f0:e2:3d:a0:5c:a2:2e:45:6b:3c:
54:41:c0:e7:8d:dd:87:11:8c:16:3f:6d:df:ae:c5:4f:d9:99:
03:60:f5:37:41:16:cd:2b:28:98:fe:e4:93:1b:38:f4:18:af:
08:e8:4b:d7:43:e7:a5:1b:bf:ca:1d:1e:1f:b9:b3:3c:c0:4d:
fc:17:14:ef:95:80:4e:ac:4f:31:59:d5:79:62:24:47:76:2e:
de:a4:00:51:b6:e0:02:3d:be:81:a5:4b:20:85:ab:04:02:7f:
cd:bb:f9:d0:da:9c:20:7f:ce:63:2b:b0:0e:7c:3c:c8:79:8c:
5e:67:2c:88:79:d3:4c:6b:da:d3:ea:a6:d5:16:ad:b5:52:d8:
37:ba:92:1d:70:8e:4c:bd:59:b4:f4:32:01:15:49:ba:03:05:
63:57:78:ba:92:ac:9f:4d:df:4f:ec:9f:4a:7a:bd:ad:31:67:
f9:bb:65:00:28:72:31:48:96:a3:79:b2:68:6e:fe:a6:fd:17:
87:fa:06:fc:8d:46:36:cc:a2:33:bd:e4:a4:c7:8c:a2:e4:84:
15:a5:c9:38:8a:ca:08:bb:1d:c0:61:4d:d8:04:f9:f5:d6:e4:
b8:c3:6b:b4:68:1b:fc:aa:3c:f5:d9:79:0b:bb:ce:61:2c:f6:
fd:9c:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:58 2025 by rpki-client