Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: 8dNGlOge9iq2jXRu+ioGI/QA4uMu/Si9GNZXjPErRyc=
Subject key identifier: AC:6E:E3:3A:14:6B:48:A1:5E:97:00:7B:99:43:58:55:E6:49:7B:8B
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019A71B7D8FF91234B9B280C894E8696FE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0F5F
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: D2zTLLT8U9K66WRY5d3z4g+1s17QxdMSp5zV/DHumbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d8:ff:91:23:4b:9b:28:0c:89:4e:86:96:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=ac6ee33a146b48a15e97007b99435855e6497b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:ab:1d:03:23:d6:33:8f:40:ac:cf:35:0d:
02:b0:b1:9c:fe:83:ab:7f:b6:bf:0e:8f:71:16:13:
7e:89:f0:1c:c3:36:43:d7:c3:e7:97:44:73:2f:92:
d8:38:ef:be:c1:49:01:b0:1e:75:fa:3c:ea:6e:56:
c0:f7:10:41:3d:5a:6e:fe:f2:fd:ab:c5:05:ee:20:
28:70:3b:ee:3c:05:24:a2:c4:af:d4:27:00:59:e8:
ca:ef:61:dd:7b:61:bf:9e:b1:4e:38:0d:a0:c9:87:
cd:86:fd:4f:5e:a0:20:9a:3f:04:61:5d:0e:ad:42:
ac:2b:f0:97:02:3f:99:09:46:76:7c:2a:cd:94:a7:
a5:0c:e0:4b:9c:e8:95:f3:85:66:73:d1:56:a9:33:
31:7e:fb:c9:70:51:6f:83:75:72:70:71:f5:b7:2c:
c2:d5:8d:bd:7b:79:77:27:05:23:93:28:7d:a0:2d:
6d:b1:f0:bd:82:cc:1f:b2:d4:0f:ad:b0:5c:67:03:
b6:b6:71:cb:40:9c:d9:f2:34:e7:74:99:b6:10:51:
c6:90:8a:e5:8d:3a:e3:de:bf:3a:45:88:68:dc:0e:
5a:32:f8:3a:32:4f:33:b7:a0:52:01:51:f3:63:97:
0a:a1:18:96:d4:8a:a2:fd:bc:de:f6:49:6f:ca:33:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:E3:3A:14:6B:48:A1:5E:97:00:7B:99:43:58:55:E6:49:7B:8B
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:d7:cb:bd:ea:6e:4b:ac:29:8e:69:56:4c:6f:36:66:7e:
87:e1:71:dc:7b:bc:9f:04:19:c8:b6:72:b5:20:5d:0c:23:6f:
95:3b:bf:bf:77:12:e9:82:ea:d2:35:ee:2a:1d:38:57:b4:46:
b7:cc:19:bd:b7:ee:a1:4b:38:1f:3a:0d:bc:09:1a:3f:9f:bd:
2a:d7:c9:ac:6f:74:3b:c8:c9:f7:bf:97:03:19:8d:b0:9f:6b:
8c:60:22:83:4d:dd:93:de:a8:3a:0a:f4:04:cb:e1:4d:78:0a:
3e:a8:0b:8b:f4:f9:3f:b4:60:96:2c:f1:ef:a9:c5:59:21:ab:
bc:1c:15:54:74:31:17:1b:f4:f6:3c:33:68:e5:2d:47:b1:eb:
d1:f6:cc:7e:72:36:ee:ec:69:ef:3c:d0:ea:0c:32:a0:46:92:
a2:a4:a4:05:ad:15:06:05:9c:64:bd:05:53:f6:9b:c4:eb:2c:
17:a4:0c:77:7e:42:62:c9:ba:3d:ad:64:b0:aa:09:e9:de:f9:
55:9d:07:05:a1:74:f2:ae:9d:b7:b1:8f:0a:40:39:fd:fb:f8:
bb:cb:31:79:28:5a:84:73:c7:c9:b0:84:00:63:8a:18:29:8d:
7e:0f:8d:12:11:e9:29:3e:2b:90:e1:88:55:68:e6:fe:fc:7b:
88:6f:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client