Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: z3E6z2baTuWnwnpgQK2lmXDKXyspKNuHhjfJ9JhZoIE=
Subject key identifier: 9A:C8:85:2A:5B:7E:78:F1:CB:CF:91:F6:EB:C6:25:32:DE:D1:A7:A7
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019A73011EEED22B3F69AAF62A3DEE58F926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: OHzq4LTKaDR0IL1xBAKy3/1BXua0L3MRiS+xDj9rOJA=)
2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1e:ee:d2:2b:3f:69:aa:f6:2a:3d:ee:58:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=9ac8852a5b7e78f1cbcf91f6ebc62532ded1a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:08:3a:12:28:22:52:d3:9f:49:99:12:c3:
3c:77:3a:76:b7:6a:11:7d:02:c3:29:4c:b7:96:1a:
89:0e:91:00:df:8a:a7:94:af:2c:03:cc:d6:b7:0a:
af:b5:ab:18:d7:cc:8c:e9:17:55:71:00:e9:c5:7d:
65:a6:70:24:93:bb:57:a8:8f:2d:08:ac:36:ae:f1:
f1:26:50:15:33:09:d1:b3:65:3b:0f:16:f1:3b:ac:
13:09:74:0d:56:7a:1f:cd:1c:ef:80:ac:d1:b5:47:
f5:44:92:74:9d:4a:e1:a3:f6:45:23:1e:dd:03:d2:
4e:13:d2:b6:1b:a5:f9:a4:3a:de:fc:0f:71:4c:aa:
a9:ba:0c:1c:d2:05:a4:a6:0a:70:30:24:49:23:88:
bf:39:24:f2:3b:65:b4:a7:41:6f:5c:8f:0b:42:61:
39:28:eb:6b:a4:83:78:d9:df:e8:e6:e5:aa:d8:45:
4c:64:4b:51:02:6b:98:9d:79:ee:56:ea:b5:b1:34:
be:4b:67:53:0d:ae:db:42:59:51:5f:50:8a:70:22:
15:5c:8e:99:e9:97:16:dd:bd:4c:1e:1a:5a:25:c5:
cf:17:c7:ec:ae:fd:9b:e2:9b:b3:4e:87:f4:4f:16:
f0:e4:af:71:3c:d8:fe:0a:15:35:7a:4d:95:ca:3f:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:85:2A:5B:7E:78:F1:CB:CF:91:F6:EB:C6:25:32:DE:D1:A7:A7
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:74:84:dc:77:a5:71:f6:d1:d4:81:e4:b3:1b:2d:bd:f3:
1c:09:d5:79:86:f1:49:7b:0b:e1:b1:4f:55:7f:d4:89:2b:e8:
dd:ce:71:ad:6f:08:79:df:e5:9f:7c:1f:20:84:ef:8e:e6:40:
38:a6:60:84:17:81:d3:1e:a6:cf:79:c5:37:43:6e:ce:0d:ec:
93:5b:a8:0d:1e:37:fb:26:b8:06:6b:b4:f5:1a:6d:2f:2e:1d:
43:72:af:49:a7:16:84:07:52:d6:ba:46:12:c7:fc:b4:c0:1e:
71:43:11:22:45:58:53:46:84:d9:31:24:13:e1:89:a9:58:b4:
94:9d:96:b7:80:99:aa:d4:2f:45:e5:8e:93:62:6e:c8:d3:17:
66:5d:4a:69:34:86:ae:8d:47:08:4a:25:ef:d4:da:3f:3d:40:
41:a2:20:b3:d0:64:ac:b9:b5:2a:79:13:4c:9c:16:ab:aa:b5:
95:78:4b:66:f6:6f:5f:5c:bf:45:ae:a8:a5:02:0f:93:a7:9c:
8b:34:ec:5a:5e:40:8e:fa:46:be:64:77:f5:a7:78:e1:65:f4:
68:34:d2:d6:e7:2a:53:4e:05:e7:4c:a6:b0:3d:a2:71:eb:41:
f9:a9:51:b2:03:f5:9e:82:4d:ee:9d:b6:66:0f:03:ee:d6:de:
ef:16:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:48 2025 by rpki-client