
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier: wPwfx8HBUTk22BFBGy14iRyIpsnOy1y9SYQzVQ3yEl0=
Subject key identifier: A7:0E:E7:00:CD:0A:1E:E1:AF:91:55:6B:E3:A7:50:19:52:3F:07:EE
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 019937CB1A97D589E5B65F519DA788D186DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number: 12CB
Signing time: Thu 11 Sep 2025 08:01:21 +0000
Manifest this update: Thu 11 Sep 2025 08:01:21 +0000
Manifest next update: Fri 12 Sep 2025 08:01:21 +0000
Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: T3ubIaJjQ93SxGXKjlSejGzyObrgCEY6kURPadKVC6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:cb:1a:97:d5:89:e5:b6:5f:51:9d:a7:88:d1:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Sep 11 08:01:21 2025 GMT
Not After : Sep 12 08:01:21 2025 GMT
Subject: CN=a70ee700cd0a1ee1af91556be3a75019523f07ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:94:d1:17:25:8a:c2:b3:33:36:5c:74:a7:
81:77:ff:dd:fc:8e:05:cf:81:8c:47:ca:f4:c3:bf:
4a:cf:61:fc:d3:bc:6d:51:e4:c0:f4:a5:cc:02:0c:
f0:2f:c7:8e:4c:0d:9a:5c:e6:88:88:fa:d7:f8:68:
8a:f9:dd:70:d9:f3:93:f1:88:49:33:c0:f4:4c:a7:
39:ad:78:05:25:37:36:97:45:79:9e:14:6e:32:a9:
0b:18:84:1b:64:3f:ee:a3:fc:67:50:bf:49:39:81:
03:58:ae:0a:43:92:81:7b:14:2b:00:4c:c9:d6:16:
12:b1:a2:12:51:c9:66:a7:b0:73:08:19:c6:8a:38:
fa:fa:ba:55:d7:f9:bd:f4:91:90:7a:18:84:9d:23:
d2:e2:39:f9:10:0d:4c:61:7d:4e:35:eb:40:84:b0:
a1:91:32:95:fe:c5:76:84:64:14:7f:41:dc:12:8c:
d8:7a:f9:24:de:3c:ae:b0:77:0c:f8:14:3c:a5:69:
68:23:fe:41:10:58:a3:70:15:d6:c9:21:a0:d4:5b:
ef:cd:14:a1:21:9a:e8:75:d0:57:4c:9a:dd:36:bd:
0f:82:c0:c9:92:9a:b5:6e:08:b8:a0:fa:f1:b0:64:
32:80:76:59:07:a2:99:af:f8:1a:dd:5d:42:50:c9:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:E7:00:CD:0A:1E:E1:AF:91:55:6B:E3:A7:50:19:52:3F:07:EE
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:f6:e2:af:dd:cf:87:60:08:9e:c2:7a:d7:5e:94:fe:cd:
63:8d:33:61:0c:f9:f6:74:26:27:07:07:56:6f:57:b5:b9:99:
d8:0d:2e:96:31:86:10:0c:86:75:8e:fe:49:7d:20:97:80:e6:
93:e0:98:e7:1d:65:2e:19:49:f2:cb:dc:b0:45:09:f2:63:90:
39:d8:d9:31:6a:a2:93:d4:e7:79:85:3c:3d:ab:c1:21:0a:21:
01:9f:85:23:56:df:05:b0:5f:72:dd:7e:6d:05:a5:e1:4a:d3:
b3:26:ac:c0:c6:d1:d1:e6:96:eb:07:2d:e7:b9:89:ab:89:53:
34:ff:f4:16:b3:e1:24:5e:af:a4:c3:ba:de:83:59:93:6c:89:
2e:ce:14:5a:2d:67:5d:b8:d0:a0:00:63:e6:ce:73:39:dd:1e:
7a:bb:f8:e0:0e:81:4c:09:64:c3:02:34:63:99:27:32:26:98:
b8:e6:46:59:4f:89:0d:bc:68:e9:e2:90:76:e4:90:3c:33:a5:
11:68:25:4a:ff:0f:46:0a:f0:85:4d:07:1a:21:29:19:01:7b:
ca:7b:42:87:a0:9e:e4:12:b2:45:62:8f:07:49:da:42:c4:e8:
4c:2e:ba:a4:98:0f:72:3f:1f:35:0b:6d:22:e7:3c:ab:4c:92:
ba:d6:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:23:24 2025 by rpki-client