Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
File: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft (raw, json)
Hash identifier: tpu/Smluz/SOzh3pIMGVzrei19r9iJuA93nNwZxQOr0=
Subject key identifier: 91:F2:A6:EF:3C:F3:AA:77:60:71:AC:E4:EF:7B:9E:00:B2:46:74:78
Authority key identifier: 54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2
Certificate issuer: /CN=543d02179741372e182811e1852d584efdcf7ba2
Certificate serial: 019A725C7A1837B0A00DBB8A7C5A4C7A37C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
Manifest number: 7E
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 8ACVm-ce43MmeBVev4dyWlkx0NY.roa (hash: +7/RIUg9QZFa+udK/mANETDLIR4ZdvLXsBeIxkf5Veg=)
2: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl (hash: qK6yk8NnHSKPS6kVOwMaQEBupWVju2t/E/s1KX12p88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7a:18:37:b0:a0:0d:bb:8a:7c:5a:4c:7a:37:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543d02179741372e182811e1852d584efdcf7ba2
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=91f2a6ef3cf3aa776071ace4ef7b9e00b2467478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:25:ed:ad:2b:1a:54:ed:c7:f9:c9:a8:98:
77:5d:d7:a6:6b:ac:8d:16:46:46:ab:bb:03:69:d0:
1f:bf:2a:62:aa:64:d3:7a:7e:45:15:bf:83:16:9a:
57:de:66:8c:23:5f:e0:79:41:44:9c:9c:ab:e7:36:
87:45:57:72:14:30:a0:73:51:63:e0:02:6c:3a:cf:
18:5a:13:19:cc:38:03:0a:8d:01:fa:00:29:66:d4:
c2:72:79:ae:99:3c:ff:58:e4:0e:3a:5a:cc:a6:dd:
0c:27:27:a3:1a:e7:d8:f4:07:c8:5b:81:87:29:42:
d0:b1:db:65:0b:22:1d:68:15:4d:d1:8a:8e:33:1e:
21:72:b3:17:58:b0:ca:a9:e8:76:95:b5:fd:fb:1b:
35:fa:68:ca:c3:fd:c3:aa:56:b5:1d:ad:54:ec:9c:
5b:36:66:ad:96:bf:c3:2e:a0:f8:95:b3:80:63:e1:
4f:36:91:22:35:4d:07:64:71:af:3e:48:45:e3:50:
6e:77:7f:5a:26:b9:c3:0f:a0:21:af:a5:2c:90:95:
18:7b:78:50:4d:31:38:a7:16:98:fa:6d:f0:bb:d4:
c0:66:c3:47:68:34:3d:01:5d:87:d0:31:5c:fd:02:
e5:0e:16:66:2a:4d:55:b2:3d:30:28:68:dd:27:08:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:A6:EF:3C:F3:AA:77:60:71:AC:E4:EF:7B:9E:00:B2:46:74:78
X509v3 Authority Key Identifier:
keyid:54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:34:1b:e7:bf:aa:70:1f:9e:74:5c:5f:27:fe:cb:84:fa:54:
d2:7c:fc:97:79:28:b2:4b:17:3c:6f:25:0e:25:8d:2c:21:ca:
db:0e:12:8d:0e:d8:3f:3e:a7:34:2d:e0:f5:10:e4:2a:3b:95:
1e:e4:db:41:c7:13:b0:62:71:a2:b2:06:94:b1:76:75:7a:74:
4e:f5:de:b9:4b:ae:2e:67:e5:0b:54:32:7c:3e:0c:cd:37:70:
17:b2:9e:47:fa:f7:61:71:d6:ec:93:ed:b5:a5:b2:f1:e1:4d:
f5:b7:3f:3a:ee:70:c9:98:48:9a:2d:46:0f:f3:b7:00:b8:4d:
c2:4e:de:51:84:dd:9e:38:0e:32:0f:84:95:c5:17:cb:49:a3:
65:c4:c5:8c:75:b9:02:81:ca:79:b2:08:bd:9e:97:1f:c4:9e:
35:5f:85:45:8b:0b:af:9c:6d:cb:e6:1a:68:3f:12:f5:78:3e:
e6:13:95:71:12:71:a6:59:3e:03:31:24:83:86:f2:f4:cf:9e:
d6:08:e3:5e:24:8c:dd:cf:9c:78:d2:5c:e2:6c:1e:bb:cb:30:
f5:29:1d:8e:3b:7c:00:f2:04:d1:42:f5:e6:3e:ff:29:04:29:
30:a8:da:f8:d6:6e:ea:09:79:a3:19:1d:69:c6:89:db:c1:2c:
b5:c9:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client