Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: Df12aSLqr8A75lu0sWCCsidkWPGOnk+QOfNwY+BVv9Q=
Subject key identifier: 89:0D:9D:15:F2:B0:51:60:5C:8E:E4:CD:96:9C:2B:4A:4E:74:9C:C2
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 019A72CA2F6403EA88FE2B22F372DE75B08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 1118
Signing time: Tue 11 Nov 2025 12:00:44 +0000
Manifest this update: Tue 11 Nov 2025 12:00:44 +0000
Manifest next update: Wed 12 Nov 2025 12:00:44 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: 9cIroxOxHlIyf80eh/+TkW5zu2XF36sb9qqJoLTiYLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2f:64:03:ea:88:fe:2b:22:f3:72:de:75:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Nov 11 12:00:44 2025 GMT
Not After : Nov 12 12:00:44 2025 GMT
Subject: CN=890d9d15f2b051605c8ee4cd969c2b4a4e749cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:ad:a6:20:4f:30:d1:54:47:53:ee:01:f1:
34:61:e0:92:cd:5d:f4:43:45:06:97:b5:4b:30:96:
83:fa:1c:78:b7:1d:97:c2:48:36:db:5e:6e:05:7b:
02:c0:af:01:55:ba:91:19:98:f3:e6:93:5f:64:71:
3f:54:0f:bc:36:1c:39:99:a2:75:4e:d3:9d:70:49:
b0:b1:f3:4d:ad:60:6b:f4:09:af:a2:2d:29:02:b2:
2d:d3:4b:32:fe:1a:a2:6b:0a:c8:fe:68:e0:a0:de:
4a:a6:fa:7c:43:86:c7:47:5a:51:58:1b:72:77:29:
fb:19:35:14:7a:06:52:63:f1:d2:5b:cb:05:b7:44:
5b:3a:67:fb:7c:80:90:af:50:e6:7c:b4:36:2a:d7:
72:d7:aa:d5:f7:11:94:6d:a3:6e:1d:8d:b5:4c:71:
d1:36:c1:8b:07:c5:5d:f8:4c:fd:4b:46:7d:22:5e:
de:c8:3c:05:77:e1:cb:eb:64:78:94:07:e1:fb:a2:
1f:8c:dd:cd:02:5d:c9:fe:bc:14:c7:39:c6:e7:36:
e6:2e:d5:34:e2:33:bb:4c:1e:a8:1d:4e:33:19:9e:
42:7e:e1:da:8a:8b:53:19:42:c8:78:f3:19:e3:34:
8b:5d:41:2c:86:31:6e:fb:68:96:2b:1a:6e:25:0c:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:9D:15:F2:B0:51:60:5C:8E:E4:CD:96:9C:2B:4A:4E:74:9C:C2
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:04:87:ef:31:72:46:0e:03:a7:05:b9:e3:d6:75:39:40:33:
37:cf:a5:d4:e5:37:0c:e4:43:07:0d:7f:1a:0c:ff:64:d2:5e:
40:32:21:08:a5:d5:e7:77:2f:8c:df:c0:03:94:ae:cd:fa:a3:
62:01:ed:9a:9b:b2:b8:d5:4e:5a:a9:be:a9:f0:53:c2:1e:63:
7f:db:8f:b2:e4:ec:02:91:db:8d:cf:3d:b2:c0:e3:89:0b:46:
80:fd:28:98:7b:0c:7c:76:6a:11:cb:b4:d9:8b:bb:87:ae:91:
b7:1e:6f:8a:71:39:8f:c0:39:93:d4:a7:ab:1d:f0:82:2a:c0:
de:55:4e:52:5d:8a:8a:dc:7b:91:c8:0d:ce:bb:40:65:a6:a0:
df:1e:a4:3a:d4:24:cd:0c:29:92:ca:16:62:f4:6f:fc:62:c3:
58:99:b0:b2:de:61:53:74:a3:81:29:fe:60:6a:ca:18:1d:95:
ea:4c:6a:bb:d7:67:05:6e:ca:2d:3d:19:53:41:c1:fc:cd:53:
5e:d3:aa:8f:2a:4a:99:9e:bf:cc:a3:d2:53:4c:15:26:d2:0f:
66:95:66:66:37:7b:04:cc:1e:a0:65:20:79:e0:3a:f3:af:b6:
46:11:62:c9:7e:ae:f0:c7:de:97:44:08:a0:6c:16:c6:56:b0:
cd:48:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:38 2025 by rpki-client