Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: PQpC/YUYdehARFC75h8+B2OYA/X+HbSH50tzF48XWJ4=
Subject key identifier: A4:E2:C4:DA:D1:1C:38:99:DE:93:9A:A1:06:F7:94:66:FF:FE:F1:8B
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 019A7293B58542F18FCE844DAD16E870FA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0ED4
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: 2s5oXopF7D7gMQem9x+p5Xk7k0LekOQ5Y9mMFsOl+lY=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b5:85:42:f1:8f:ce:84:4d:ad:16:e8:70:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=a4e2c4dad11c3899de939aa106f79466fffef18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:a8:f8:2f:36:cd:f7:38:f0:e3:1d:e7:d6:
fb:6b:19:35:17:7d:7f:50:0d:21:53:c7:2b:f8:d7:
2b:df:f8:3d:e9:6f:e2:4e:fb:00:2b:2d:e2:dc:ce:
e6:33:bb:a5:ec:1d:59:11:9c:41:85:c4:64:97:82:
c8:14:57:a3:af:08:89:7a:b2:f7:13:09:e8:6e:9c:
e5:40:9e:8a:3a:02:41:04:ae:eb:6e:35:ba:47:a8:
90:35:8e:c2:ef:65:ca:ae:66:b3:c1:cc:22:76:21:
ad:cc:c2:90:32:b1:fe:80:d6:64:6e:19:25:f8:ca:
37:29:f9:46:2f:89:f2:07:63:8b:20:ad:0b:0a:28:
47:e9:3b:2a:3a:d2:cc:9c:78:7f:60:37:05:ca:4c:
9f:64:5c:02:c2:25:cb:5c:33:d9:9a:62:ba:5e:a3:
b4:ae:22:c2:68:94:72:a0:b2:55:51:6b:63:bc:87:
52:47:8d:7a:ad:b5:1b:6b:b7:71:87:c7:8b:11:fd:
5b:a6:48:0b:15:91:d8:a3:11:e5:e7:2f:f0:a0:68:
9c:a5:37:c6:1b:96:e7:8f:0b:0d:30:13:3a:3e:ea:
f7:bc:76:f0:10:7f:8b:3f:39:5e:45:4b:72:36:b1:
c4:1e:53:5f:d8:2e:10:d0:a2:f9:c8:37:ce:4d:2e:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:C4:DA:D1:1C:38:99:DE:93:9A:A1:06:F7:94:66:FF:FE:F1:8B
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:68:b7:b6:4a:27:f1:5e:e7:cb:1f:cb:46:39:36:ff:35:
79:53:98:ba:09:c4:3d:c9:b4:43:47:2a:08:87:1c:91:d7:12:
fb:c4:82:b0:3f:f7:e2:07:1e:b1:41:4b:bf:2c:bb:6f:ed:10:
1b:ee:ed:75:e4:6e:5a:26:8c:6e:7c:ef:81:93:75:4a:55:9f:
42:37:5a:e5:ae:e7:bf:a0:5b:b8:e4:85:f6:f4:63:75:2f:9e:
8b:36:39:e0:1b:c6:3b:89:07:3a:78:0b:8f:ba:0b:b8:b8:78:
ef:b1:9e:83:88:ba:96:2c:ac:ec:b4:b9:0a:39:59:ad:10:2e:
27:8b:66:c3:b3:58:9b:cd:05:ee:05:67:ab:04:6f:43:80:41:
08:72:c5:78:43:26:7a:ea:6c:9c:92:31:1a:a3:48:c3:4b:3c:
64:b7:6d:ef:9b:65:62:ff:07:96:1d:9d:69:f1:68:f6:d0:db:
04:f8:1f:b0:d7:55:c5:fc:18:b2:44:bb:7a:3d:d6:c2:62:e2:
91:fa:2c:a4:8d:ab:6a:7c:f8:2a:d3:80:13:04:49:da:e3:d9:
6c:bf:15:cc:32:46:ff:c0:49:80:d5:b0:bb:99:66:73:92:5b:
7d:7b:2a:ae:f4:a5:da:f0:06:2f:9c:18:81:ce:7e:09:f1:2a:
5c:26:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:07 2025 by rpki-client