Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: mDdz4ZJsVRa/zKmuD593tKgUu+uzP4+hSV7PAxwNXHU=
Subject key identifier: 6D:49:6F:67:1B:3E:DB:42:A3:C6:AD:0B:7D:13:38:75:FD:C2:92:E4
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019A578A22E3F2FF4D050B3B3D5AAF7489CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 06CF
Signing time: Thu 06 Nov 2025 05:01:01 +0000
Manifest this update: Thu 06 Nov 2025 05:01:01 +0000
Manifest next update: Fri 07 Nov 2025 05:01:01 +0000
Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: jaOxUsnvg08nLGlYNSrsdQhl6oOnG13Z+Wq4Wpa9USU=)
2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:8a:22:e3:f2:ff:4d:05:0b:3b:3d:5a:af:74:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Nov 6 05:01:01 2025 GMT
Not After : Nov 7 05:01:01 2025 GMT
Subject: CN=6d496f671b3edb42a3c6ad0b7d133875fdc292e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:2f:64:92:0a:32:16:99:db:02:75:29:f3:
e2:af:7f:29:a9:7a:63:26:41:76:8f:45:da:f4:9e:
1c:d1:31:ac:95:78:8f:f1:19:7c:2a:a9:08:ed:43:
d9:02:21:c8:f3:fd:ca:b1:25:8d:71:cf:23:1e:a0:
2a:40:7b:d2:94:c5:23:d8:8b:43:fd:65:f0:92:d3:
e1:04:87:5c:33:fa:9a:20:c5:b6:71:f5:05:5d:a7:
10:01:6c:1a:57:9f:35:93:ad:3a:7c:1f:33:13:ce:
58:86:cc:03:18:7c:f4:9b:c3:bb:43:b3:88:6e:bb:
bd:87:8c:4d:73:6f:23:be:2c:4c:dd:3a:c7:c7:40:
31:54:a6:e8:31:2e:67:15:76:31:a6:8f:44:0d:40:
ee:51:29:3c:bf:cf:7e:d5:6d:ad:a0:9e:de:ce:f8:
08:93:38:50:16:bc:e4:5d:08:15:9f:c3:5f:98:ee:
c7:fd:aa:96:a8:29:7e:21:7b:06:52:d2:4a:87:3d:
d9:e2:85:3b:e9:44:ca:c5:9e:d3:14:71:a3:60:1b:
3f:b7:2b:4c:9d:26:d5:a3:b8:12:d9:91:7b:50:f3:
41:0f:a6:97:5f:53:97:9b:e6:c9:bf:3e:f4:02:22:
f9:9a:c1:5a:f9:82:18:0d:5c:d8:7c:cd:c1:95:7d:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:49:6F:67:1B:3E:DB:42:A3:C6:AD:0B:7D:13:38:75:FD:C2:92:E4
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:2c:a9:35:c2:83:58:37:52:08:10:63:0c:cf:86:59:c6:
0d:ca:7c:3e:c6:7e:4f:9d:09:3b:05:00:41:52:bd:0b:12:c7:
35:45:43:cd:94:01:af:38:89:83:e9:9c:6a:4b:a3:10:7e:62:
36:a8:65:97:b6:cb:79:c2:58:b1:96:57:f7:6b:f7:97:a5:f3:
f7:37:cf:48:60:dd:d3:e2:05:5c:f3:73:a7:32:2e:7f:b4:12:
90:2d:21:0b:5d:cd:fd:6f:a6:08:5a:71:94:43:3d:5b:a4:65:
93:9d:94:8c:c1:c5:68:6f:2c:f1:99:36:df:16:cd:6f:95:72:
2c:2f:cf:bc:90:fb:a6:33:0a:27:34:11:1f:7b:0b:70:2c:3c:
44:c5:a9:67:10:a4:ee:47:74:89:a7:bf:08:af:01:88:59:3b:
d1:28:dd:32:25:60:d3:9f:f7:26:d0:53:68:b5:55:e4:fc:d8:
6a:5e:0a:1e:ee:e3:27:9d:b7:23:ce:c2:cf:e7:eb:c8:2a:d3:
ac:62:97:5f:03:cb:05:7d:ca:ce:bd:24:46:e0:fc:37:1c:5a:
8e:1e:2e:a9:98:15:1c:b7:33:08:ce:00:3b:d0:e1:96:13:d5:
84:79:5c:94:ed:da:7c:64:56:27:03:48:f5:fb:19:7e:9f:da:
a4:a5:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:17:37 2025 by rpki-client