Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: dmPqm2QFbQ3AYNcfpNAgO6dQBw1bZJJrm+R9Io3FczM=
Subject key identifier: BE:D8:CC:68:5F:C2:E3:D1:B6:AA:0F:80:C1:76:8B:72:74:89:31:F6
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 019A72CA63D6A0AAD367B654299DC81E5555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 0A23
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: uYqlfSC49atEPdI5t/XQtFJqycyRdomwIEEG/XMhYlY=)
2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:63:d6:a0:aa:d3:67:b6:54:29:9d:c8:1e:55:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=bed8cc685fc2e3d1b6aa0f80c1768b72748931f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:dc:91:42:51:91:29:63:f6:9e:a1:06:58:
b1:44:b0:43:31:b0:4f:e3:ea:9d:10:a1:d9:48:6b:
74:8f:56:6d:e7:0f:bf:48:5a:ac:48:3d:bc:c3:d3:
7a:18:b6:8f:63:a4:52:75:49:ea:fd:54:6d:0b:a0:
5b:8a:2a:34:fb:3e:df:e1:7c:0b:70:5e:45:74:42:
83:f9:a4:75:54:cc:a9:77:67:ec:aa:31:1b:46:21:
de:5b:09:3a:9c:90:4e:fe:ba:ec:4f:1e:2f:72:88:
e5:ce:2b:84:86:79:ba:81:22:80:04:44:b7:57:cb:
1c:ba:13:f1:c6:d6:b1:52:3b:d1:28:83:7a:91:0e:
1f:4c:98:28:2c:e9:20:56:0d:4c:42:a8:60:21:dd:
09:3e:2b:0c:15:f6:16:b0:21:9c:08:67:29:d7:66:
91:e5:d0:f5:2c:98:39:28:9c:2a:e2:a6:7f:22:98:
05:36:c2:05:2b:83:6d:d7:26:67:54:49:a4:6f:cb:
16:63:77:82:6b:13:dc:d7:00:64:08:4d:c8:7d:80:
3c:d6:04:3e:48:78:c1:65:ec:b7:82:e4:11:d9:43:
7e:04:19:ff:44:7b:c8:16:f8:09:f9:cc:29:f2:cf:
fb:c8:91:b0:67:47:5b:54:06:71:76:5f:15:90:70:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D8:CC:68:5F:C2:E3:D1:B6:AA:0F:80:C1:76:8B:72:74:89:31:F6
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:60:10:4b:8b:b0:43:59:88:5c:4f:04:54:5e:46:42:5e:
c8:e3:42:79:95:3d:81:94:88:df:dc:11:b2:6a:80:e7:cd:80:
5d:ef:a0:34:31:20:5b:e2:e2:29:a7:57:b8:38:bb:b4:07:0f:
c9:91:c4:0c:e2:33:02:90:c0:46:32:85:bd:49:41:e2:da:48:
de:e0:5b:93:d8:dd:69:03:25:cb:f6:e4:67:1c:e5:25:d1:73:
aa:59:39:5b:2c:50:ab:62:6b:da:05:da:74:c7:2b:a8:70:9d:
d1:f4:83:92:3e:2d:c1:27:59:a3:56:88:1c:93:63:5d:5f:53:
ad:31:6c:cd:a1:94:d4:4a:eb:fd:40:55:9d:ad:aa:da:ae:5e:
a5:1a:be:9f:9a:e2:4b:d8:73:82:d9:32:ca:1b:4d:99:b7:d9:
05:64:b7:02:87:f1:69:c9:94:c8:5c:d3:73:76:10:bc:5e:4f:
1f:8c:ad:e9:d7:8b:87:7f:6e:0b:12:24:82:2f:43:75:0c:8c:
21:58:62:55:26:48:e9:8e:ab:64:e8:e7:09:45:52:e1:61:e4:
7e:5d:3c:95:8f:fa:18:cf:56:30:83:d9:13:dd:56:31:5b:79:
3e:57:4a:a9:25:77:32:be:20:37:30:d6:6f:67:9e:6f:a8:92:
ae:24:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:27 2025 by rpki-client