Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: 47/ykvGYubQmYACVHb5jKHM5Vy/SgbEMCyC4BjZ+Lec=
Subject key identifier: 92:E5:C5:13:90:B9:6F:EE:1A:34:A5:C5:1F:91:6E:C0:5A:2B:B8:2C
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 019A70DC6B6ED56D12279FB8172E6765E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 1677
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: eEWPZ5KzDfs8c0Q7NL7UPIykwvBp0+R98HEX76lTrNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6b:6e:d5:6d:12:27:9f:b8:17:2e:67:65:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=92e5c51390b96fee1a34a5c51f916ec05a2bb82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:a6:fc:61:ce:f2:4e:2a:ad:89:ac:5a:3b:
0a:e9:ca:40:8d:30:c0:01:81:45:33:ae:05:b9:a8:
40:e6:27:8c:b3:26:75:5b:3d:e5:c5:db:9b:ca:2b:
f3:0d:59:b8:1d:aa:35:c5:d0:f8:84:79:f3:b9:29:
74:9d:0c:ec:25:39:78:4e:46:bb:71:0d:c3:c2:db:
3e:29:7d:46:0e:76:ae:f8:d9:fa:c2:30:ae:02:27:
a8:99:4b:2e:73:b8:f7:a5:62:3f:46:a6:73:d0:18:
e6:b9:13:48:7a:3b:cc:c0:f0:aa:d7:e1:74:fe:69:
4f:26:06:02:df:e5:d9:b8:46:51:9b:36:88:6e:24:
68:6b:fa:93:55:e7:79:bf:03:ad:12:54:1b:35:0d:
e0:9e:82:6a:3d:0e:db:7a:8d:03:1b:55:2c:67:87:
b5:4c:76:5c:77:29:2c:fa:85:a6:34:38:69:c2:a5:
dd:f1:54:96:a8:1d:af:69:e7:4b:70:10:d7:88:f9:
10:69:63:14:b1:22:7e:35:8a:44:a2:2d:20:23:92:
fc:90:11:e3:18:c6:23:04:11:84:de:6c:cd:65:a4:
49:05:94:44:45:8a:b2:fc:54:5c:d0:e4:69:af:b2:
07:10:70:40:a9:63:13:2f:f9:63:f2:82:6c:5b:fc:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:C5:13:90:B9:6F:EE:1A:34:A5:C5:1F:91:6E:C0:5A:2B:B8:2C
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:e8:88:3f:3a:15:26:81:f2:a1:ca:a9:03:25:2a:19:6b:
c1:e0:b7:69:78:4d:8b:8f:2c:8b:5e:59:e6:45:9f:63:dc:33:
2d:46:f4:f6:ce:a7:bf:88:30:80:eb:28:22:b8:ef:db:19:22:
88:fc:f7:b6:da:f7:3f:ad:78:2d:9c:41:40:a3:06:62:82:bd:
62:a8:c5:f5:55:ee:8d:12:08:b1:22:ad:c8:f7:18:85:2e:b7:
ee:5e:ae:82:13:c5:38:3e:ff:71:e5:5d:67:03:75:e4:35:93:
6d:17:67:10:b6:3b:8a:21:32:09:ca:89:a6:db:e5:2b:bf:59:
91:ce:75:d1:75:7f:63:74:04:51:bc:55:3d:a3:a8:08:04:2f:
3e:f8:67:eb:53:7d:46:74:49:a3:e6:dd:79:63:a7:a1:d7:9c:
ce:e5:69:f8:c7:90:7c:92:e1:a8:6d:d7:b4:1d:ee:63:be:0f:
ab:d8:37:b7:2e:0c:73:0b:9c:f2:4d:3f:0e:29:8c:33:f3:6d:
65:68:6c:70:cf:0a:ac:cb:ce:7e:a4:be:b7:34:27:84:fc:60:
0d:f9:41:d2:5c:31:ef:6c:14:3c:3f:a5:f4:99:6f:fa:36:1d:
41:5b:d2:e3:e8:6d:ea:ba:97:1f:75:db:fa:5a:a1:62:15:4f:
ae:92:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:45 2025 by rpki-client