Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: owyKVx6UIwt2PxZR9VgCyyZ+4wgGZbgnRWYcmBbtPqc=
Subject key identifier: 52:4F:2F:26:3E:77:DE:91:DA:4D:6E:7D:E4:70:02:04:8E:CE:E9:64
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 019A7301920ECC478955B24C560480362B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 1608
Signing time: Tue 11 Nov 2025 13:01:13 +0000
Manifest this update: Tue 11 Nov 2025 13:01:13 +0000
Manifest next update: Wed 12 Nov 2025 13:01:13 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: AR+DQTBSTc5fql09i3NSisHCyHq/mtui24aG1IPutyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:92:0e:cc:47:89:55:b2:4c:56:04:80:36:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Nov 11 13:01:13 2025 GMT
Not After : Nov 12 13:01:13 2025 GMT
Subject: CN=524f2f263e77de91da4d6e7de47002048ecee964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ed:13:19:4e:2f:d5:ed:ba:de:93:bd:99:cf:
d9:0b:1b:2f:bb:39:46:eb:0b:ef:6b:19:c9:42:19:
e7:b9:1c:8c:b7:ab:82:8c:3f:e4:5a:fd:c7:93:87:
69:c5:52:0a:68:9e:79:5f:39:31:2c:09:72:53:90:
ea:01:69:37:2f:06:11:e2:a4:cc:50:d5:5a:ec:93:
b0:d8:e8:ba:7f:b8:68:72:8d:1e:c3:87:ef:17:42:
51:f0:39:5c:91:5b:64:ad:2b:32:3a:ac:2e:dd:b5:
7a:d0:07:c4:93:93:1e:f7:92:34:19:00:6d:a2:d1:
41:0a:71:86:ee:12:f4:db:65:e9:db:93:f4:1e:69:
d7:b2:98:d2:6e:f7:27:b4:05:9c:98:f9:09:eb:f2:
f1:6c:1f:7f:d6:e2:26:c5:d2:b8:fb:38:f5:e0:41:
50:85:4f:a9:e3:f0:23:81:c9:d1:59:e4:56:c7:d3:
01:36:59:f3:8a:66:0e:58:ab:e4:8b:64:cd:79:c5:
f4:3b:85:59:9e:4e:e8:08:ba:6d:65:63:3f:ff:f2:
21:65:5a:17:31:fa:ba:e8:27:d6:cd:e4:0f:08:f7:
a0:4f:ee:10:22:10:05:d3:fc:ef:1d:75:24:00:b6:
65:c8:46:98:3d:ca:bb:12:2e:cd:2e:f6:8c:c1:c3:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:2F:26:3E:77:DE:91:DA:4D:6E:7D:E4:70:02:04:8E:CE:E9:64
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:58:00:bf:f2:62:74:94:aa:c9:d9:f0:07:e1:6b:19:bd:
0a:7d:b9:8d:9c:94:db:c4:2a:7c:d5:b5:ef:dd:de:5d:c1:51:
9f:f2:67:1a:f9:ab:5e:e9:42:dd:c3:5a:32:6d:8d:1c:7d:b8:
62:55:58:ac:ab:59:c4:42:df:6d:8f:ee:c7:f3:1e:8a:47:7f:
c9:79:17:44:90:48:f7:14:50:9a:07:cf:09:d2:c8:3f:87:76:
b8:fa:fd:52:da:e9:53:fb:1a:38:d5:ab:05:0b:c8:7a:79:6e:
72:f9:7f:37:ae:20:80:0a:e4:38:87:dc:cd:98:1a:81:bd:11:
b0:de:d1:ad:e1:31:31:f8:c0:cb:08:07:bd:c5:04:04:e0:78:
1c:cf:2f:9b:92:81:e2:9d:b6:a3:10:c5:7f:3b:ea:ad:11:34:
52:bc:1e:a0:70:b2:6a:65:6e:d5:3d:c6:1a:9b:e0:11:d0:24:
94:21:2e:5f:25:80:35:4f:90:cc:00:c5:98:ee:a9:31:9a:fd:
a7:64:e6:a9:c8:08:fc:ad:02:45:0a:7c:b1:7b:17:47:87:7f:
26:3f:7b:43:7e:ce:8b:3e:94:e3:ee:c5:c4:09:52:10:87:3b:
3a:a8:bb:86:8f:ce:4a:7a:8e:63:50:4a:33:a7:dc:29:15:49:
b3:3e:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:12 2025 by rpki-client