Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: zGY253ivQqIq9T+XbF7y173C4KuoYNmpMlTtAmgB4Sg=
Subject key identifier: 32:EC:14:59:3E:9B:7D:9B:E8:14:B5:E2:88:11:8D:70:A6:E1:84:99
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 019A7293B221EA3B29AAB0A987F4042F44CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 166F
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: G63L2v/xVdSUccKqPuamalTMG3eCsTjC7snGEqdhP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b2:21:ea:3b:29:aa:b0:a9:87:f4:04:2f:44:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=32ec14593e9b7d9be814b5e288118d70a6e18499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:25:68:7e:ca:0d:54:48:e8:fb:57:4a:6e:
93:a2:c0:41:f1:d6:28:23:27:c1:95:c2:ad:1f:e0:
00:d4:e5:95:f6:7a:a2:b8:a9:ce:dc:e3:5d:08:88:
af:89:1f:5e:0a:bc:84:80:28:fd:d5:ac:28:27:c1:
88:a0:a1:54:76:ed:86:9c:01:15:7c:09:df:f0:f3:
8d:13:03:cf:12:11:90:68:15:fc:1a:ef:55:81:4e:
22:ab:b9:ca:70:1f:9b:59:4e:98:27:8e:d2:ba:cf:
10:61:38:9f:58:aa:6f:d2:dc:1f:3b:6a:6c:c1:21:
4c:9c:86:1e:c1:91:cc:9a:ca:65:ca:7c:59:b7:94:
fb:62:b7:a6:86:38:27:8a:37:25:6a:b9:ac:3d:a5:
51:96:5c:42:0f:59:6a:e3:41:f9:09:52:b3:02:2b:
f9:a5:8f:b4:c3:e0:f5:6a:10:28:d4:a0:44:1f:35:
32:3b:ee:5d:49:9b:29:bd:16:ce:3b:96:77:85:6a:
42:41:40:d4:b5:7a:0a:f9:af:06:3f:6f:39:2c:f9:
42:df:7a:47:58:3e:f3:4c:17:dd:89:a9:03:69:2b:
50:02:32:9b:3d:35:48:64:1c:fd:87:57:ab:df:1e:
30:75:63:06:00:1f:e5:07:4a:85:e1:e8:37:38:0d:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:14:59:3E:9B:7D:9B:E8:14:B5:E2:88:11:8D:70:A6:E1:84:99
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:be:12:bf:dd:55:a8:6c:2e:86:00:b1:07:8d:86:d3:0f:14:
b4:7f:45:97:a2:c0:38:39:ce:24:6c:87:db:a7:db:39:91:f2:
66:1b:dd:f2:97:d3:15:5f:5d:13:01:24:77:80:7b:ce:52:9d:
39:0b:bc:2f:ba:bc:8c:0f:3c:82:6a:a3:20:3a:46:c3:bd:5b:
34:62:d1:fc:d8:dc:3e:ca:16:9c:55:07:47:43:a9:88:15:0f:
95:61:a7:97:35:30:7a:f7:66:39:9b:cd:0a:66:8d:ba:aa:b4:
59:9c:d9:b3:f2:fb:d5:58:5c:c2:8f:77:8a:8e:8c:b3:b5:9e:
0a:6e:6e:25:c0:87:f9:51:62:56:6f:90:21:bf:06:c5:e1:94:
65:bb:97:7a:38:c0:7a:80:d7:d5:fa:a7:e3:cb:ce:98:31:f3:
89:d5:00:ff:79:7a:fd:b5:77:6e:f9:ec:f6:15:e9:cb:95:97:
93:8d:0b:f2:20:2d:a5:bd:22:1d:2e:85:d8:0d:46:50:7d:93:
0f:d2:71:c8:dc:bc:c6:c3:af:d9:75:2e:4f:91:6a:0c:d0:13:
d5:fc:74:29:b1:4e:63:a8:68:fa:ea:96:6e:fb:f2:bb:c7:3a:
ff:02:4b:e1:b8:66:5a:59:3e:9e:9b:3b:ca:a5:48:ab:b7:b6:
8c:5d:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:49 2025 by rpki-client