Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: kz+/CizJt9iZ9uWULHIGs7uKQ7CIlVP+uM8AxX3XCWo=
Subject key identifier: 14:53:74:BD:DE:B5:3B:0C:61:B9:1F:95:20:68:E2:8A:E1:6C:F5:1B
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019A71498FBD89FCEDD0D6F0D6C7CDA20556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 1540
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: AqRcwBOoELP7sO7G2ArRpdIIf-8.roa (hash: Y1QC1/53Sd9JtcwMQ3kWoyldjEFlmNNOZ3rUXpglWPs=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: 1ta8cVJ93pyvX2921U1xEYp2i5BveGScJ51Yn3cRlqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:8f:bd:89:fc:ed:d0:d6:f0:d6:c7:cd:a2:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=145374bddeb53b0c61b91f952068e28ae16cf51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:b2:7a:21:48:b7:4e:2b:08:34:21:4f:b7:
48:60:d1:d7:91:37:ed:f2:67:06:e6:72:27:59:e7:
a2:88:44:45:95:21:4a:70:ee:11:b1:0e:06:e7:7e:
00:f9:ff:01:21:32:41:ba:0e:98:d6:39:db:81:f2:
c2:fb:b4:ef:57:3f:39:20:62:09:a8:12:38:76:14:
ce:21:48:86:e8:b7:3a:18:85:e3:a6:3c:21:0c:f3:
e7:34:da:82:e5:f5:b1:4c:20:be:c7:56:6c:95:a2:
6c:b4:ed:e6:b0:b1:dc:fa:17:7f:e1:c6:a1:69:9f:
7b:69:2c:bc:a9:1a:c4:f6:74:4b:6c:6a:5a:61:5f:
6f:f0:7e:75:29:7a:32:70:2d:15:29:ab:fc:a8:e8:
fc:df:f7:7a:2a:9d:60:73:ed:12:79:90:47:a7:58:
c6:c7:3b:f5:8d:97:50:cc:50:9f:a9:9f:19:e3:f1:
c2:5b:73:2b:17:40:47:e5:7d:02:1a:71:ad:4e:3a:
ca:b4:1f:f2:6e:b1:15:06:17:d3:77:2f:db:42:47:
91:93:04:54:cb:fb:bf:55:84:75:65:10:fa:12:ac:
e8:c7:f5:a9:08:15:aa:85:73:ee:c7:cd:46:d7:36:
ac:5f:26:9d:ad:18:ee:a6:eb:8f:f9:2a:5d:6d:e0:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:74:BD:DE:B5:3B:0C:61:B9:1F:95:20:68:E2:8A:E1:6C:F5:1B
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:9b:d0:b7:27:a7:4c:54:4a:67:5a:58:09:27:29:e6:8d:
ba:61:52:f0:58:cc:1d:5f:f8:1e:24:c6:24:a6:3c:4f:7d:11:
40:ee:3d:5b:89:30:5a:8b:9c:78:af:27:53:2d:29:9b:cf:94:
43:a4:5b:6b:fc:98:a3:21:ec:8d:2c:5e:d4:14:ea:b6:4d:c3:
e6:c7:a4:d0:dc:b5:07:f7:15:0f:13:69:9d:a6:7a:42:0a:be:
8e:d9:df:2c:a8:fb:78:a2:ab:4a:1d:e3:6a:1a:7d:4b:01:4e:
b2:bd:25:f3:be:c6:ad:72:a4:c9:62:58:44:ba:ec:d2:98:42:
50:fb:96:e3:89:a4:81:5c:9c:94:fe:75:0e:53:48:b1:81:4d:
8c:cc:f2:f4:1a:be:ab:51:36:08:66:b1:30:a5:67:b5:df:c6:
4d:2c:b7:ae:0c:37:4e:34:6e:e5:2b:e3:4b:d8:b3:bb:b1:ff:
fc:2e:54:e4:bc:a0:0e:95:97:56:06:22:cb:66:44:fc:77:03:
b2:c4:5c:f1:14:23:e1:fb:9e:93:e5:1f:a2:50:7f:7c:b1:2f:
ae:8a:a4:f4:d8:0e:70:61:0b:97:5a:b4:71:c1:40:66:8b:a6:
5a:36:66:dd:60:96:f1:e2:44:c1:d4:40:dd:63:b9:78:6d:09:
f0:c6:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:57 2025 by rpki-client