Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: FpaQ/GuGcHPCqMnHQKSgNEX9EwSYlla8CeI70fbSnpU=
Subject key identifier: C7:0B:C1:3E:CA:F1:81:37:BE:AC:C2:7C:8A:F0:E1:33:F3:B5:DD:14
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 019A722586EF7E10CBFC3C6A67CADB0399CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 0544
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: QYUJRYF7MwUuTlAO4iYOcnV6D9NY8eegURL/wfdw9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:86:ef:7e:10:cb:fc:3c:6a:67:ca:db:03:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=c70bc13ecaf18137beacc27c8af0e133f3b5dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:6b:f6:a1:d9:86:c9:11:8b:7c:8f:27:c1:
29:b0:7c:75:92:b6:aa:5a:0b:cd:cc:cf:b9:d4:9e:
a1:56:61:99:4d:e0:8a:b6:04:3b:8a:e8:8f:43:97:
56:44:cd:f1:7b:90:3e:4b:9b:2b:06:b7:5a:5c:09:
70:d7:ea:a4:ff:92:f6:be:de:f0:8c:28:5b:9b:5c:
bd:12:be:1f:06:4c:9c:12:5b:d5:59:e6:62:0d:15:
06:bc:83:a7:a4:ec:b0:cd:60:d1:08:be:ca:eb:5d:
10:46:35:eb:f2:90:87:cb:09:99:5b:9b:8f:25:83:
91:37:cd:5f:a8:2b:7a:dd:9a:45:25:80:ee:60:ee:
35:f7:03:a3:05:2e:b0:cf:f1:ca:37:d1:c5:5d:06:
e5:44:9a:47:c5:88:09:33:b6:03:53:03:13:c5:79:
d5:d2:d5:dd:01:d8:7e:bd:38:ad:31:98:5b:7b:0b:
7f:0e:af:a5:29:0b:7a:72:0d:b9:f1:b9:ed:52:b8:
1b:ca:77:d5:da:cc:9c:ce:fa:af:ef:42:86:62:43:
bb:85:fa:a1:85:36:30:c2:5a:a4:a5:0d:1d:06:30:
e3:ac:1d:9d:5c:b5:9e:34:f4:b9:3c:aa:0c:23:27:
d5:6b:49:ff:81:ef:3d:61:87:6f:de:3b:14:e6:5a:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:C1:3E:CA:F1:81:37:BE:AC:C2:7C:8A:F0:E1:33:F3:B5:DD:14
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:bb:d4:62:26:ff:f8:37:ae:7b:77:f5:94:1e:9d:6f:d2:
75:fc:b8:f0:41:18:c4:12:84:22:39:5f:14:eb:29:db:b0:7f:
12:f1:9e:25:79:32:80:68:82:90:17:72:fe:d5:51:08:85:4d:
2d:3a:f7:93:79:3e:f3:a1:09:d3:06:d7:aa:d8:1f:08:5f:e5:
35:46:30:f6:c9:60:55:77:20:7e:de:05:3e:4c:8d:b3:18:e7:
dc:47:9c:ed:74:51:85:aa:f1:be:a2:e7:e8:71:09:60:18:67:
26:84:67:a3:ab:81:c3:a3:ca:fc:d6:bc:67:ff:eb:0f:78:54:
da:38:c5:25:4e:3a:b7:d2:f9:14:f8:fa:8a:b5:d0:5b:a8:93:
51:5a:dd:52:d3:06:84:e2:38:9d:c7:fd:0c:90:0f:80:e9:df:
ba:51:c0:cb:65:03:e5:7c:6e:c6:dd:c7:5f:30:c8:e4:0a:1b:
d5:0c:72:8b:1e:4b:51:e1:70:f5:a7:48:ad:82:1d:9b:aa:1d:
36:43:1c:cc:47:8f:87:8c:e3:f3:74:0d:95:6f:3d:51:cf:29:
e3:82:95:40:b7:19:2e:d8:f7:82:b6:3f:8b:e7:95:9f:9e:e7:
2e:dc:13:ee:02:fa:32:ed:df:e2:8c:ab:c8:62:d0:2b:7a:4f:
c1:dd:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client