Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: 7FsOHAXWfepEycCh3pbxPWARjItzFcBfyoCYh24VxA0=
Subject key identifier: F8:E0:08:F7:6D:EB:28:8B:A0:7D:C6:FB:04:C7:94:56:0F:79:40:8F
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 019A7112A6268D045731093AE241B98E2318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 0AE3
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: GKhYCupK4gPI33/lZorMaqdV7GLVFCEmLdFZKRany5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a6:26:8d:04:57:31:09:3a:e2:41:b9:8e:23:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=f8e008f76deb288ba07dc6fb04c794560f79408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:c7:0c:66:ab:07:44:a8:00:17:62:b7:d6:
43:4d:6c:c6:ed:c2:c7:9b:ff:9d:ec:23:35:70:53:
e0:0f:b9:f1:ce:2b:96:6f:dc:81:0a:bf:be:32:c9:
a5:7f:ad:40:a3:24:84:54:b7:2c:59:bd:b1:e6:3e:
ae:3e:2b:9e:c2:ab:50:65:d9:d5:8a:5d:2d:d3:ae:
a1:ef:05:01:da:f9:dd:a2:9f:94:95:f3:8a:01:8c:
a9:2f:49:96:25:7f:f2:06:dc:fe:bd:dd:82:7b:db:
2d:ac:4a:12:ab:d4:37:11:12:f5:6b:bb:a8:85:c5:
2c:78:50:9f:42:46:34:b2:07:f5:75:b3:61:b2:c4:
67:9c:55:36:5d:cd:fc:b6:e5:e7:c2:86:0d:99:bf:
81:bf:1d:47:d4:cb:ce:ce:d4:b0:69:11:a2:2f:d9:
8a:fb:df:50:2b:75:62:60:29:de:ed:02:51:8f:bf:
2e:8c:a0:9f:05:91:a5:18:32:59:57:ea:3c:6a:cb:
2f:17:97:64:13:8c:7d:44:0e:70:41:ef:c8:96:28:
91:47:7f:03:f2:a1:d5:92:66:b3:6f:9f:ee:5e:0f:
23:05:27:fd:8d:f4:44:a0:3f:ac:c4:e8:9c:e5:81:
d1:e5:94:28:39:78:28:5f:6d:12:88:85:b5:68:98:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E0:08:F7:6D:EB:28:8B:A0:7D:C6:FB:04:C7:94:56:0F:79:40:8F
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a7:11:40:eb:f1:7e:4c:41:b3:ff:1e:34:b8:e7:d1:df:9d:
ca:34:43:79:51:d1:ac:4d:90:fd:63:1b:75:b4:c0:89:74:ad:
fe:86:c2:da:4a:09:e5:18:53:67:ab:86:3f:96:1d:12:7b:7c:
f7:81:4a:de:36:cf:61:eb:81:ee:97:bc:b8:09:95:5c:f8:e0:
de:6e:30:d7:a6:a1:7b:55:ce:53:0c:31:95:da:a4:bb:9b:2b:
a4:97:ca:43:12:f4:ed:a0:9b:a7:5c:52:9f:82:71:7b:d6:3d:
80:b8:b7:f9:6f:a9:88:66:7b:ab:7a:3b:43:bd:45:30:21:ee:
c4:6b:b9:4e:ca:21:a9:6b:dd:59:66:77:0c:18:aa:e2:52:79:
53:c8:13:a4:e8:7b:f8:f7:be:25:57:cf:70:a7:cd:49:35:ed:
1d:6c:4f:d2:c6:71:44:44:8d:9c:b0:cf:63:a6:17:44:28:7c:
f6:9f:f4:be:59:02:be:24:d5:e8:f4:1a:cd:5f:42:bf:a2:91:
49:1a:a0:ec:99:c6:d8:2f:7b:3e:cf:95:b5:ad:50:9e:65:2d:
87:5c:cd:c0:92:34:bb:6a:80:e8:d8:3b:7c:5a:c0:9e:f6:2e:
fd:fe:69:2e:25:c4:1c:03:d3:8b:e2:e6:1e:73:0b:6f:0c:8c:
fd:59:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client