Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: 7d8VTT0k2Z6M/Tt33qhKXdDrFofkJh0/m7lP+fzMo2o=
Subject key identifier: F4:04:6F:10:CD:77:D9:83:B0:6D:4C:0A:62:F3:6D:05:71:55:9B:E1
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 019A71808F4D0BDBB16A9C07673DDBA106C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0DCC
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=)
2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: U1QfPYUOwNDuBJCkUQJct7inUUoRha1Oeg5j9jHq+R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8f:4d:0b:db:b1:6a:9c:07:67:3d:db:a1:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=f4046f10cd77d983b06d4c0a62f36d0571559be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:f8:37:ee:9a:f7:4d:e8:b2:5c:ee:6c:09:
80:e0:7f:96:2a:76:42:be:24:85:8a:b9:06:b2:9c:
50:bd:19:e8:f5:b3:ec:12:12:dc:77:4c:43:18:37:
a3:71:12:cc:06:01:1a:bf:c0:53:cf:b4:7b:90:08:
97:35:45:73:20:44:6d:e6:41:4f:b3:f1:7c:6f:29:
4e:4e:c2:31:32:f7:fc:e0:1c:1d:3b:7c:de:57:81:
a8:fd:17:47:c9:05:5f:0d:10:e4:80:1e:96:02:0d:
87:b4:eb:36:8d:b6:26:a1:3c:b5:5c:db:5b:25:19:
1e:a3:e9:82:1d:df:81:96:70:a3:21:d1:b4:25:cf:
2a:b9:d9:20:72:63:66:56:4e:9f:f9:0a:a3:f9:79:
bf:f0:46:a5:a9:ea:aa:aa:6c:01:14:27:2a:d7:1b:
68:f5:e9:41:18:ce:fa:23:a2:21:60:dd:46:55:c4:
a5:45:91:55:d4:bb:62:e4:99:87:4e:41:98:9b:ff:
9f:4c:61:b7:62:88:a2:94:e7:83:6d:55:b0:6f:27:
2f:e8:0d:8c:52:44:11:fe:fa:89:0d:7f:d3:df:78:
7d:b0:3c:73:85:03:f6:71:25:b5:c9:cd:d1:62:73:
ff:c6:4e:e2:50:d8:5a:4e:be:76:91:54:76:95:5e:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:6F:10:CD:77:D9:83:B0:6D:4C:0A:62:F3:6D:05:71:55:9B:E1
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:e8:39:84:ca:c3:d4:74:1b:e8:40:46:34:a9:63:b2:32:
05:dd:7d:ee:08:99:a8:d3:f2:3f:5d:20:70:43:71:81:9a:d2:
f6:c1:ed:56:2a:67:95:3f:a9:5d:5a:ab:e8:a6:e2:5c:55:39:
20:fc:71:8d:89:f5:cd:ac:49:2e:12:a5:49:77:dc:6a:a9:e6:
16:9c:32:97:db:77:66:58:01:60:c2:52:68:ba:a9:d8:d1:6d:
7c:76:c3:44:ac:39:14:3b:7c:45:6d:d6:16:ec:7c:45:0b:19:
af:ce:06:71:ac:78:ea:c7:c8:9e:18:52:30:12:89:bb:72:64:
bb:8d:ac:5c:90:e5:b1:cd:aa:b3:c7:94:88:85:4b:73:c8:c4:
a4:bd:ac:4f:b7:e2:0c:22:74:34:6b:c3:7f:8f:68:13:f2:59:
92:2c:df:38:ce:b1:29:82:5e:9b:6c:65:2f:53:62:f9:a1:44:
8a:e6:b7:33:2a:ee:08:a2:d6:74:f3:4d:4b:cd:b2:31:6f:60:
6e:de:2b:db:b2:84:ff:41:a5:fa:3d:cc:2b:62:26:96:f7:b4:
a3:75:26:07:d7:4b:43:cf:96:c2:41:9b:9c:41:af:c4:b6:a5:
fb:34:3a:36:41:6f:42:11:7a:9a:ce:76:ec:e5:1c:88:9c:8e:
56:71:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:15 2025 by rpki-client