Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: NgZdZZM+LY9V7ytjjcubgB32PNsLd/GvF3poTK2WRAg=
Subject key identifier: 91:E1:1F:32:4C:BE:9B:91:D0:B7:BB:31:88:2F:37:EE:88:DE:60:96
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019A72CA82557B756686908BD28F5BE4A14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: hJUfxCrP2/AuRfcSQ9bPp/A209iQ+Ha65+WJoWrUlsc=)
2: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:82:55:7b:75:66:86:90:8b:d2:8f:5b:e4:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=91e11f324cbe9b91d0b7bb31882f37ee88de6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:27:b4:83:d7:d2:0a:53:6e:6f:fc:3f:a0:
b7:ff:c5:ec:42:24:34:9f:9e:03:c6:05:f3:bf:da:
10:66:5f:cc:d5:75:9d:04:19:23:14:95:2e:a5:11:
40:a2:3f:b4:f2:8d:06:5c:17:a6:f0:85:6c:37:b8:
f1:32:a4:82:ee:c6:23:0a:78:44:65:a5:97:0b:fa:
0e:50:94:ef:58:6b:4b:6e:c6:6a:a5:e5:9f:d0:c2:
c8:4c:84:a2:67:38:67:d3:df:bc:9d:a9:28:68:db:
af:68:c3:a6:f8:99:86:46:67:a4:8a:ee:dd:db:fb:
05:4c:ec:c8:28:7b:1d:f8:6a:9e:4f:67:d9:31:6f:
d9:74:59:15:8d:14:57:d8:df:61:d4:c2:74:89:e4:
63:e8:9f:d8:f5:40:a2:93:76:3f:4d:3c:e4:b9:b0:
2b:fb:8e:e0:c7:da:7f:60:68:5d:6a:1d:38:98:b8:
00:57:06:e7:0e:46:21:76:c3:ad:4d:08:87:96:df:
44:96:02:41:c5:9c:58:7f:c9:66:30:f5:0b:70:de:
f5:af:91:25:e1:ae:6a:7c:66:79:e0:c3:4c:9e:5b:
9d:d1:6b:8e:18:5f:09:d1:75:22:fa:b9:2c:0c:21:
91:04:b8:69:0c:94:57:b4:8c:f6:4e:37:a0:16:59:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:1F:32:4C:BE:9B:91:D0:B7:BB:31:88:2F:37:EE:88:DE:60:96
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:2b:c5:cc:19:85:dc:f4:8f:ca:6b:6a:72:de:5f:e3:9c:
ee:1a:75:5e:7c:92:81:50:e1:43:76:72:7f:f7:8a:2e:0f:81:
2a:ab:75:6c:52:c0:60:54:86:3c:74:9e:31:f5:93:57:c6:3b:
dd:0a:ee:0b:2b:60:a2:80:1a:74:df:9e:4d:9f:41:da:bb:5e:
c6:11:53:ec:3e:8d:69:cf:d8:f8:eb:83:cd:2f:74:f7:20:af:
52:6c:20:7c:b0:b5:e4:33:cf:88:37:7e:99:a1:17:15:7c:97:
b9:66:7d:40:de:7d:2b:c7:09:e7:f7:b0:33:bd:1c:b7:99:5f:
34:ef:72:3a:07:04:54:4c:11:26:ac:02:49:4f:d5:c0:9d:25:
68:33:b6:3d:b9:4f:ee:ff:df:8e:bb:8c:b0:ff:b0:86:bb:93:
4a:b2:89:aa:92:e6:4a:62:d4:36:ba:44:38:c4:0f:61:92:de:
67:91:2c:9d:55:47:fe:84:c0:df:ef:c8:9d:d0:21:67:98:23:
41:f5:fc:21:7d:b1:ea:12:67:ac:52:60:ca:0d:24:5b:f3:fb:
25:ae:04:01:c3:ee:1b:59:ff:c7:9d:3a:4f:fc:27:03:48:4a:
9f:a3:7a:e9:f2:73:2a:6e:df:48:1c:cb:81:30:a4:96:d5:b7:
ca:08:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:22 2025 by rpki-client