Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: W7Eu7C8NCJFKF+pd/SLM0ErFBBKGIN0L92x1gjQWxHg=
Subject key identifier: AC:27:DA:5B:D2:6C:68:9E:27:30:79:DF:72:EB:A8:E8:87:7C:38:27
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019A730147AC2C8ABFA27C74B05CF1B93DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0250
Signing time: Tue 11 Nov 2025 13:00:54 +0000
Manifest this update: Tue 11 Nov 2025 13:00:54 +0000
Manifest next update: Wed 12 Nov 2025 13:00:54 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: FFTGLOGLvJId1fywEblmfFvNIyegq/yFlk1di7hH6i8=)
2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:47:ac:2c:8a:bf:a2:7c:74:b0:5c:f1:b9:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Nov 11 13:00:54 2025 GMT
Not After : Nov 12 13:00:54 2025 GMT
Subject: CN=ac27da5bd26c689e273079df72eba8e8877c3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:97:c3:2f:1e:bc:58:4c:51:92:3c:a0:0d:
8e:a8:99:96:0c:48:c3:c9:aa:b3:11:d7:a7:66:35:
9c:29:eb:b1:ab:03:e3:d7:48:43:a5:b6:88:62:2d:
b2:09:73:6d:70:e9:c9:dd:83:d4:73:cd:52:14:c1:
42:ec:60:39:5b:e0:21:18:c9:b9:1a:48:7e:32:38:
2a:93:3d:91:79:a6:9f:60:01:6b:da:91:fd:54:7a:
a6:9e:83:5c:da:b2:4b:3e:51:10:0a:76:0e:2c:37:
5c:5a:c9:e4:6d:8a:1d:79:98:0c:eb:7e:3f:48:0b:
d0:3c:71:61:41:ed:ef:77:8d:f2:b3:cf:74:b0:dc:
6b:b5:e1:d3:ee:f5:50:6b:6d:5f:c9:d2:7b:88:8c:
e1:d1:f0:70:9b:a5:00:c7:e5:bb:f6:5f:54:23:a3:
81:e2:8d:43:81:d6:63:e2:27:fb:d0:14:b6:3f:11:
f9:e8:69:4e:1b:9e:a9:68:08:b0:c0:8e:3f:6d:44:
6b:8f:d4:8f:06:ef:a0:dc:a8:f4:0a:7e:5d:22:3b:
91:da:78:cf:88:ff:d2:63:2f:f4:e9:4b:d8:91:68:
08:38:c2:90:3f:7b:c1:8b:d9:18:12:13:81:af:d5:
53:b3:4f:d3:8a:7c:2e:98:d8:b7:23:b1:ab:9e:3f:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:DA:5B:D2:6C:68:9E:27:30:79:DF:72:EB:A8:E8:87:7C:38:27
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:07:71:f1:64:42:0e:ae:85:23:dc:00:10:9c:09:6a:86:
27:41:be:1c:0a:31:cc:81:aa:70:f0:bb:b4:3d:d7:59:de:a6:
66:05:b6:01:b8:d8:e6:73:69:28:cc:b2:ce:76:0d:49:13:5a:
df:e5:15:44:f9:46:8d:fd:1f:9e:cb:67:dd:c9:c6:ae:93:7b:
82:34:83:a0:8e:8b:1a:09:79:9a:33:61:83:2c:83:ab:a3:d5:
66:c3:37:a4:7d:08:78:e3:d3:1f:cc:f7:0c:08:4b:0b:f2:3e:
78:71:02:4e:63:3d:5b:c3:c9:bc:1d:02:6f:9e:fc:78:47:5c:
08:99:f8:93:d7:28:6f:b5:1f:88:0c:33:d2:eb:95:2f:cb:77:
5c:f0:e3:ef:f5:9c:88:48:60:9a:27:93:d0:b7:83:bc:90:d8:
9e:07:43:0f:8e:b6:3e:92:be:86:a7:c4:14:c8:72:2a:3c:95:
bc:fb:ab:4e:94:be:5d:e8:8d:c6:e5:f5:84:f3:7f:8a:8e:fe:
89:d4:39:0d:ca:b9:e1:45:cf:c7:a9:38:89:ce:9e:82:cd:5d:
65:c3:84:8d:24:d4:4e:d0:51:30:cf:98:88:ba:b9:0a:ed:8d:
84:cd:74:bb:cf:77:7a:aa:e9:9b:4a:0c:64:a2:09:3f:56:2e:
bb:7e:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:09 2025 by rpki-client