Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: vkMxkJMwjivyNG7Drm62VtYnutj+lLwIWRWlF/CwfWs=
Subject key identifier: 52:1B:C1:7B:97:28:75:5D:2C:DB:F7:E9:EC:83:7E:45:01:6A:CF:C4
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019A72CA951835B22C144A4BA8B141EA7F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0CF2
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: nbNjRgU/l4gI456YNxhiVXOi0pBUuymJNGMMwiADJME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:95:18:35:b2:2c:14:4a:4b:a8:b1:41:ea:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=521bc17b9728755d2cdbf7e9ec837e45016acfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:cf:27:02:e7:0c:4f:b9:48:b6:52:d0:6e:
89:d3:a4:1c:a1:aa:03:62:df:31:da:43:57:12:17:
30:e1:ff:c8:44:f2:70:63:a8:b4:31:33:d3:ea:dc:
1f:9e:6a:7b:af:13:d5:8f:a4:d7:03:6f:ce:e9:bb:
f4:9f:e2:36:b8:fb:8f:61:7b:02:73:3f:41:e7:c5:
11:fa:8d:de:e1:46:3c:c5:ae:f2:41:b0:06:74:24:
ac:e6:3f:ca:d7:11:f1:ed:c2:34:e0:bc:fa:22:f2:
4a:5f:fd:91:b6:6b:5b:cb:97:d4:e6:57:bd:1e:9d:
d0:a6:ea:93:a3:71:ad:d6:dd:f7:bd:f1:25:50:4e:
72:38:3d:07:ae:57:a3:e8:06:2b:a0:29:d9:55:5d:
e7:f3:73:22:25:49:91:ee:83:80:e9:28:14:a6:61:
01:d1:3a:04:64:76:31:cc:ab:80:b8:42:31:2c:ad:
30:03:ef:da:6a:f2:da:3c:47:dd:81:19:fd:e8:f0:
18:d2:d7:92:fa:ca:bf:6f:e1:ab:70:96:f6:22:20:
ba:61:e8:b9:9a:a2:bb:b6:5a:60:3b:dd:4b:91:71:
82:20:62:ad:1d:5f:19:b5:62:6a:41:30:b4:f1:d1:
0c:25:40:57:8d:63:e6:15:f6:a5:2a:58:ec:f8:70:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:C1:7B:97:28:75:5D:2C:DB:F7:E9:EC:83:7E:45:01:6A:CF:C4
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:cc:58:19:1a:d7:c3:bb:15:63:a4:78:2b:78:27:3b:f7:
63:1c:99:1a:62:52:5a:9e:44:7a:aa:9e:d9:d9:6f:5a:ce:cc:
d7:62:c4:e3:33:de:5d:96:9a:4a:99:72:0d:eb:56:10:ee:9b:
d6:73:78:c2:a4:c4:07:37:e5:bb:29:8a:af:69:35:9d:0c:c9:
f2:97:a8:99:07:9e:60:7d:2d:93:c0:a4:8b:26:3c:8f:21:eb:
a5:a7:44:f8:cb:25:eb:b9:08:49:d6:c0:57:c9:54:e2:92:fb:
9c:3a:2f:1f:eb:c5:e3:4e:40:09:e4:3e:87:21:5a:7a:34:ad:
54:40:84:b8:f9:cf:af:24:6a:1d:c3:97:b7:45:7e:d6:d8:06:
fe:7b:8f:b6:3a:66:17:9d:ba:23:f9:ac:9a:04:d3:d6:d3:45:
99:d6:93:db:cb:e9:41:0f:f0:7b:d2:5a:d8:c4:31:e9:26:c4:
db:a4:69:e0:19:db:95:9e:08:a3:41:d2:87:e3:f3:a2:4b:3e:
2e:54:55:a8:de:b4:eb:db:e5:d0:da:70:0f:3e:08:c0:1d:63:
39:b5:bf:93:d5:8c:f3:ff:d6:50:7f:e9:f0:f5:8a:9e:08:7e:
fc:9b:45:e4:1e:20:fd:0a:c2:44:7c:e2:bf:ac:b7:e5:e9:1b:
60:76:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:29 2025 by rpki-client