Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: A4TC0PSdQ2TgNAT7bVQtK2NP+Lmq/Nm1AjZ6GLW14zU=
Subject key identifier: C3:7A:A0:43:D9:F1:79:7C:BB:E9:A9:BF:43:83:D5:83:D7:25:E7:43
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 019A725C90102BF324AEED67E744863AB018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 142C
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: eIO/xGl6EnuwkKEDIHx9aar0EdK9h2go6uLNpqeQCk4=)
2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:90:10:2b:f3:24:ae:ed:67:e7:44:86:3a:b0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=c37aa043d9f1797cbbe9a9bf4383d583d725e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:1d:17:9a:21:71:b9:97:27:1f:d9:fe:ef:
e1:5b:f0:4c:f5:af:d6:54:ec:1a:46:6e:8f:12:89:
7c:c5:b4:2d:3f:1b:fd:46:28:d6:2c:86:3f:55:aa:
c9:04:44:f2:b6:bf:35:67:c3:33:0f:77:12:f0:52:
73:2e:9e:5a:d5:ed:aa:24:11:85:47:c3:be:90:2d:
ee:49:d3:f3:f8:44:ff:c8:38:22:db:18:ee:97:11:
9d:dc:d3:55:ae:19:73:0e:3a:33:28:91:59:b3:0a:
86:80:f2:23:63:42:ca:a0:8c:78:83:c3:dc:69:bd:
08:57:ba:e1:5e:ca:68:d0:6a:2f:f3:17:bf:41:88:
92:08:a9:ea:95:26:1d:54:0d:d1:3f:e5:f4:4d:de:
07:4c:da:a1:06:89:72:93:ed:e9:01:a3:79:67:de:
67:c4:36:0b:02:84:be:04:89:f8:cd:3a:99:18:c2:
f0:45:97:62:8e:16:b1:68:f0:32:cb:2b:3e:fa:45:
66:10:c7:78:2b:aa:ea:39:34:dc:ed:c2:6b:73:bf:
da:b7:7c:80:ac:53:77:02:82:e5:50:4f:c9:ca:6a:
74:2a:6b:e4:20:b3:6e:d9:a8:c8:19:26:30:33:c6:
6e:62:8e:cc:f8:c1:e7:9e:76:c8:5c:0a:d4:db:fd:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:A0:43:D9:F1:79:7C:BB:E9:A9:BF:43:83:D5:83:D7:25:E7:43
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:03:e5:fa:30:f0:79:5d:37:e4:b9:a5:b1:a2:07:1f:db:
ac:31:d8:a3:93:6b:e1:c2:76:57:db:bd:9d:7c:0e:da:86:f5:
14:63:f9:7a:94:ac:bf:ab:e0:3b:ee:10:d5:77:ef:d8:3d:c0:
57:6e:1a:21:37:de:dd:e3:1e:61:14:a6:5e:82:ff:db:db:da:
79:3c:07:62:01:27:d9:9a:9f:a7:f0:2e:07:95:05:25:15:8b:
ac:aa:08:5c:8a:4f:4b:25:51:62:d3:dc:05:45:ea:7c:8c:2b:
1b:21:7f:8a:0a:5c:b2:3c:78:a0:72:5f:17:81:99:e9:63:0e:
02:02:02:31:82:c2:93:52:82:77:2d:1f:5f:b0:9a:e0:6e:db:
5c:6b:c8:d4:49:6c:37:d9:e9:a0:7d:4d:46:9d:5a:dc:71:1e:
23:85:05:2b:15:a9:b7:ee:6d:ed:dc:fa:47:27:d0:ea:fd:bf:
4c:d3:44:37:a7:39:4b:f1:a3:f5:1a:9b:f7:01:c5:a6:5c:b4:
1c:b8:15:dd:c6:09:1a:c6:ff:06:62:35:8f:27:0e:0c:9b:bd:
b8:be:27:17:53:19:95:f3:99:11:a5:e7:26:fa:98:18:0e:2c:
57:de:99:09:55:e1:ed:6a:10:7d:31:7a:9e:4d:5e:7f:f3:4b:
bf:28:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:15 2025 by rpki-client