Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File: dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier: SGMxyvXrD04I44xz3hJAgZ47VOOfJe8FZehqH9xGzWw=
Subject key identifier: 2B:F5:22:F9:FA:EF:F5:95:71:C0:06:52:4E:23:66:B4:C6:A3:2B:58
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial: 019A722610EE54E1DBD71D5D68308E9E2B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=)
2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: hWefp+aCZ7tqz5QvPNBF6fMxpTwnJ1okpd7r0YHFcrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:10:ee:54:e1:db:d7:1d:5d:68:30:8e:9e:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=2bf522f9faeff59571c006524e2366b4c6a32b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:2e:0e:db:b0:c3:c1:a5:c2:62:54:ae:dd:
c1:89:ea:c8:07:44:a7:4a:14:47:8c:c9:9a:c6:b0:
0d:b0:8f:a4:5b:bd:05:94:ad:79:b6:02:0d:03:5d:
17:b0:64:05:26:f2:01:b0:5b:db:7a:9b:53:f3:c4:
95:90:ec:04:cf:58:25:39:86:5f:17:cd:b9:61:85:
00:98:73:1c:d8:eb:fd:38:d8:d3:92:62:07:5d:f8:
61:8d:3e:86:ad:0b:95:e5:e0:15:ed:3d:52:d4:3f:
48:af:7e:c2:43:5c:ac:91:33:a0:7d:30:f8:9a:35:
77:07:6d:1b:65:12:82:f9:74:78:c7:f4:ff:db:f8:
d7:02:29:43:1a:fe:d1:a5:9c:f3:08:18:97:1c:cd:
75:66:af:70:12:1b:34:2a:e9:38:22:a2:93:ad:69:
e4:f1:b7:5e:e8:4c:c5:9a:4e:69:5f:7c:e8:1c:29:
58:58:b7:a8:57:b2:bb:1a:77:30:99:97:8b:c5:66:
2d:78:66:57:35:3d:24:d8:bd:38:84:a4:57:81:eb:
24:04:b1:fe:7f:3b:5e:8d:d6:78:91:25:2d:76:bc:
5f:64:43:37:62:a2:eb:08:be:ff:22:be:ac:b6:f5:
d2:3b:c9:f6:d1:db:eb:f8:f3:69:a6:88:6b:92:70:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:22:F9:FA:EF:F5:95:71:C0:06:52:4E:23:66:B4:C6:A3:2B:58
X509v3 Authority Key Identifier:
keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:a1:4b:52:0e:35:22:fe:4f:93:16:f9:e1:61:90:74:8d:
c1:81:b1:f5:35:1b:c0:85:11:36:a2:4a:b0:fb:60:4c:6f:7a:
b7:19:9b:a0:0d:24:55:b3:f2:51:88:4c:30:04:c8:7b:16:ac:
1c:4c:a9:23:1c:8a:5a:6d:f6:7d:9d:40:c3:ec:5b:40:ec:98:
67:75:21:18:73:d3:dd:a4:22:e5:39:c4:15:34:bb:a1:aa:d3:
da:88:a3:91:79:51:b3:29:65:1b:2f:07:f6:a2:85:23:f9:f6:
89:86:ac:ce:09:67:d6:49:a8:43:68:b3:2b:6f:92:7c:c6:bf:
c8:9d:83:48:f9:88:b2:23:88:88:3c:d5:58:5a:7c:c9:3f:d7:
2e:d9:a6:c6:91:7a:98:6a:9e:67:76:f6:c6:f0:20:b8:71:01:
40:1d:fa:a2:ca:ae:b1:4a:5b:a5:75:da:5a:27:ac:66:0e:e3:
d2:c3:65:c2:ab:24:80:d2:9a:2d:01:08:8e:7b:01:fa:da:72:
f4:3a:4d:99:59:41:29:1a:4e:ea:cf:a6:04:4b:55:b6:46:30:
df:4a:95:43:fd:ee:b5:c7:b5:49:19:bb:ba:74:92:8e:a8:24:
32:72:97:89:d7:cd:e7:02:03:7a:9d:9d:5d:44:e7:ab:25:19:
83:09:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:29 2025 by rpki-client