Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: BF0ThV7ZabX3xQSVsGmwJHpJ5JjH9671/v1k3o0BXks=
Subject key identifier: C1:E8:71:AB:5E:6B:98:EA:09:92:14:59:E5:4A:B0:90:70:18:5F:41
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019A725CA2B3F75B3673AC8B407CBFF31A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0B9E
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 2GddVKlLqDHz3jGINuxAaNndgi4.roa (hash: NX+DTGci6J0ZuUfn1NcxftSpxOGbzEMso8wgVo2GWr0=)
2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
3: SHaKbFPNsLxfj0s-D5n21WdMWXU.roa (hash: WwVmn3+VNOBpT8pGoSZiYks1QQTfhs67OIXLYD1YY2w=)
4: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: 8JSyrZkhyADnrIB8PFW56rGtTUBYwfAfhh8jksqRbMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a2:b3:f7:5b:36:73:ac:8b:40:7c:bf:f3:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=c1e871ab5e6b98ea09921459e54ab09070185f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:cd:c9:ab:59:cb:f3:68:7d:bb:b2:27:8c:
40:a7:fe:e0:78:5d:ec:ba:18:e6:cd:55:93:d7:5e:
8c:8e:ac:a0:83:ca:90:bf:ca:16:6d:ed:80:aa:10:
7b:61:b9:ed:88:be:b3:b8:0f:58:2c:5b:c0:c3:4e:
c0:b3:e4:9e:bc:8b:7d:f2:90:3e:37:ac:da:37:c5:
3c:5c:4e:a3:6e:5c:fa:91:d3:fb:77:c1:04:73:f6:
7b:00:76:ca:19:04:af:b7:9f:fa:42:ab:2f:b0:5b:
12:24:3d:98:ea:62:90:aa:68:cd:f4:b0:cd:28:65:
f9:bb:9c:4d:1b:64:60:ff:a6:9b:70:9a:3f:77:cc:
7e:78:36:3b:04:35:84:82:6a:5e:d3:11:78:a8:55:
ae:32:34:dc:47:af:e0:e3:7c:41:cf:8b:70:12:8c:
6d:51:aa:79:b1:2f:73:f7:50:67:e7:82:ae:3a:7d:
75:62:9f:84:95:1b:48:38:a0:a6:73:f7:a3:e1:51:
b4:8b:66:ee:3c:a3:29:58:1e:a5:2f:fd:35:74:4f:
2f:f0:1c:dd:f6:9c:5b:ce:3c:4a:84:70:d9:62:aa:
e6:dc:fe:98:70:8e:0e:4c:17:0b:f2:05:60:7e:33:
0f:bc:1a:f4:fb:3b:4b:76:42:a9:8d:2e:58:30:22:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:71:AB:5E:6B:98:EA:09:92:14:59:E5:4A:B0:90:70:18:5F:41
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:53:5c:16:0d:53:21:9c:68:02:db:ae:d0:c4:c1:fd:e3:ab:
b7:e9:d0:1c:f0:28:17:b9:9e:3f:17:54:5d:eb:6b:4e:8c:7a:
84:3f:9b:0d:91:44:95:2a:da:06:b7:ba:0b:b4:62:82:33:dd:
08:67:03:2f:ff:6c:ea:d5:89:e2:94:ee:c5:66:49:25:38:b2:
56:03:39:ee:cb:ab:a9:9d:c8:7e:95:f2:62:b4:b5:db:6f:b6:
06:26:1d:74:88:5f:49:4a:6d:5b:a8:d7:00:3c:a5:b3:b0:cd:
d1:4b:85:b7:95:a0:29:be:c1:bb:d1:90:af:2a:3e:0b:49:1d:
9f:54:c2:0d:27:c1:ba:c6:74:91:38:11:40:f2:9c:93:a6:fe:
73:d3:03:6d:21:d9:b4:09:8d:f3:a8:c5:1c:7d:c6:0f:a6:8d:
4c:be:7a:7f:26:fa:48:2a:b0:5f:66:f8:ae:e2:b0:75:6d:97:
8d:60:59:a7:df:5c:3e:54:c8:16:a7:8e:99:b1:5f:a7:5e:82:
13:76:a6:10:c7:98:51:59:82:e6:e5:ac:67:3e:db:b4:32:2e:
71:f0:90:07:1a:a5:35:3e:35:0a:51:35:3d:d9:9e:2b:eb:d4:
78:f2:69:de:43:11:34:c3:f1:c5:34:12:a4:b8:fb:26:2c:84:
d7:0f:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:13 2025 by rpki-client