Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: L0qBNcEg2MUkndf/V8Tv55Fs2f9RR99M/Hwzdmro8gI=
Subject key identifier: 89:40:22:DC:75:9F:AB:9E:73:E5:0B:5F:4C:4A:EB:F8:1D:26:2A:88
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 019A71B7EF2C755F8A58A7DDC29492609B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: lPgmeykHQfjMAbufUMGtpKGyqppmzwi/YisP/EKvQAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ef:2c:75:5f:8a:58:a7:dd:c2:94:92:60:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=894022dc759fab9e73e50b5f4c4aebf81d262a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:e7:e3:42:29:3b:e3:22:40:53:fb:85:c3:
6e:d5:39:ec:87:2b:50:13:7b:44:4e:ae:6a:9f:34:
1e:f4:b2:e0:ab:bb:c5:62:d4:1b:9d:e4:21:d2:78:
76:64:0f:22:b7:de:04:c6:6c:88:ed:ba:43:20:a9:
c8:45:5f:2c:24:21:fa:94:c3:45:82:94:41:34:d0:
2c:69:20:dc:aa:cb:a8:97:7e:ea:06:7b:63:a8:59:
22:94:ab:dc:12:73:82:32:78:55:9b:d6:09:cb:24:
33:96:05:88:e0:81:e6:7b:74:db:c0:fc:d1:fc:91:
c5:66:83:a3:36:e3:eb:bd:56:1a:76:3f:e1:f5:f7:
9c:67:e6:f2:bd:cf:35:4e:36:a6:01:92:a0:ae:c6:
64:e9:3f:9f:ec:4e:01:3f:21:61:a1:47:e0:32:45:
31:01:1f:6e:8b:ae:5b:ae:e1:cd:6d:37:f9:eb:51:
1e:4d:fd:34:64:0d:8c:bf:8c:59:ac:39:c4:b0:3e:
10:56:42:2a:47:86:11:6a:c1:88:8d:d3:6e:c8:eb:
3a:4d:21:c5:25:25:c2:7f:06:cc:d5:a6:1d:f0:a0:
c0:ab:88:f6:b9:21:06:75:66:8c:0a:d1:6a:41:fc:
53:af:9d:d4:91:0f:18:8d:0e:c3:e2:03:df:b3:ed:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:22:DC:75:9F:AB:9E:73:E5:0B:5F:4C:4A:EB:F8:1D:26:2A:88
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:bc:29:5f:0d:67:c7:a5:24:ad:57:d7:8f:33:af:d1:c4:
01:d0:1b:87:ef:e7:37:9e:71:35:5f:55:40:85:12:22:a1:83:
32:cd:a2:37:a3:e5:aa:b2:e9:9f:da:59:b7:c1:6c:41:2e:22:
19:52:1a:c2:22:ec:c9:d4:62:fa:41:bb:aa:1a:aa:5d:0b:92:
3c:22:9c:bd:64:6f:18:54:be:ea:97:39:c8:ce:83:95:56:7d:
f1:38:ef:f4:b2:05:3c:1b:89:fa:dc:ec:e8:bb:0e:3e:d5:dd:
a2:5d:61:88:18:21:7e:13:e1:1b:d0:0f:92:dd:4e:4e:98:39:
7f:c8:c7:ff:2e:6b:bd:9d:41:24:1a:d6:cf:4c:8c:93:58:04:
f9:b2:0b:74:d4:4a:43:16:f6:9e:bc:bb:24:0a:f8:35:9b:fa:
a9:35:8c:90:ef:b1:e5:bc:e9:30:f8:bf:21:d6:63:0a:11:c6:
d4:38:6f:9c:e5:45:70:91:93:5f:d0:81:ca:65:d0:3d:f7:db:
f4:06:4a:77:3b:03:95:9f:4c:47:ba:b7:b4:44:34:89:16:80:
f8:de:5c:34:16:87:45:85:4e:53:4a:c1:0b:b3:cd:eb:dd:8f:
d6:b8:ad:fd:39:40:19:83:9e:92:7a:5b:54:d2:5b:57:98:1f:
49:f5:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:36 2025 by rpki-client