Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: an6upZb3r7PtkEcB8rCc3DllMWhfFOL0OxEo9KrUP0w=
Subject key identifier: 47:2C:2F:B0:48:8C:61:E1:26:EC:A0:EF:73:EA:3B:88:26:C5:46:9D
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 019A73A6D6E095B10AE1D46A06A498B4617A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 0643
Signing time: Tue 11 Nov 2025 16:01:45 +0000
Manifest this update: Tue 11 Nov 2025 16:01:45 +0000
Manifest next update: Wed 12 Nov 2025 16:01:45 +0000
Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=)
2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: P/hpl/MguPJd6TgfUrrQgGguqFjNlX1UEur8Yqt6ih0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:d6:e0:95:b1:0a:e1:d4:6a:06:a4:98:b4:61:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Nov 11 16:01:45 2025 GMT
Not After : Nov 12 16:01:45 2025 GMT
Subject: CN=472c2fb0488c61e126eca0ef73ea3b8826c5469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:80:4b:13:c5:48:8a:44:26:5e:e8:4d:6d:
e8:06:0d:08:0f:b4:b9:7d:d1:49:45:6b:57:5d:f9:
46:a8:a4:18:b0:61:f5:d2:e4:ed:80:2e:e4:10:7f:
7f:65:75:79:79:61:08:61:ee:4f:99:14:36:d9:ee:
b3:73:f7:6c:8c:52:0b:fc:0c:53:3a:b8:b5:26:31:
52:11:b4:b9:6e:0d:1e:25:5e:f7:ee:73:f5:80:74:
e0:4d:15:bf:2d:56:08:04:06:21:63:a8:34:1f:fb:
f2:09:92:c8:f6:6c:21:96:b4:8e:dc:55:17:54:bd:
79:ad:4c:d1:76:50:a3:ba:82:e0:da:c9:cd:b0:e7:
5f:c3:b1:f9:a9:58:51:a1:14:94:4e:56:cf:14:d8:
8b:4d:f8:a8:8a:3b:fd:59:05:15:38:a6:90:00:4d:
d3:26:1e:07:d9:8e:ea:55:6a:a4:66:18:12:32:b8:
77:26:e0:b5:a5:94:11:76:71:b5:a0:31:ec:73:45:
c5:fb:df:58:bc:3f:a8:2e:90:2d:2d:dc:fb:11:f6:
e8:7f:42:68:79:4b:17:bb:fc:8a:b6:7b:b3:49:be:
00:d2:d4:19:93:b2:3c:ce:8f:5d:99:5f:5a:8c:26:
8e:24:3d:29:25:38:b7:3c:cd:18:59:ff:46:cf:75:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:2F:B0:48:8C:61:E1:26:EC:A0:EF:73:EA:3B:88:26:C5:46:9D
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:f9:d4:da:83:7e:0f:ae:bf:60:3a:b8:17:a7:ba:36:73:
7a:3f:5c:89:46:66:ae:d4:58:09:e4:75:0d:7d:3d:84:6d:90:
7b:51:89:14:1c:bb:0b:28:d1:ad:c0:cc:81:31:50:83:b6:6e:
b4:e2:15:2e:a4:39:f0:74:0e:8d:bc:53:b1:d8:4d:6f:5b:51:
28:87:79:b5:56:71:41:4d:12:23:56:f5:05:cf:b8:21:f5:32:
7d:66:f5:db:16:b7:14:b5:6f:81:43:65:1c:1d:2d:d3:6f:83:
ff:ba:b8:e5:7d:7a:ef:9d:0f:18:1d:62:21:a2:45:71:ea:12:
2b:43:77:81:74:d0:cc:5b:8b:93:47:63:d3:a1:50:fc:4e:63:
71:d0:91:e7:8a:2f:c4:ea:be:e8:7d:d3:79:8a:09:1d:c0:c9:
ac:ba:a2:03:22:37:15:f2:2d:50:4d:4c:30:f7:ed:18:d0:ef:
77:9d:14:b5:29:cb:06:c1:34:c0:70:a0:b6:f1:d0:cb:61:68:
fc:92:83:f1:4f:bb:d2:d2:4c:57:07:40:33:66:44:72:88:b2:
01:8b:c1:3e:fb:fe:3c:e9:c9:1e:1f:07:bd:be:b7:ba:f7:ba:
c0:3e:45:c4:d0:72:61:99:42:32:8b:9e:74:dd:e2:35:79:7e:
8f:ab:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:05 2025 by rpki-client