Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: d3KsB/RDmScGFSQZx8ePZ8+ZeavtwxulCtds3y/gKVk=
Subject key identifier: 6D:3B:B5:46:C2:96:35:B5:2C:81:6A:4E:BA:DC:1E:B6:3B:0D:60:AD
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 019A71EEA7158BC300F951C6DC03F7AE1A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: iYbBdS4Ltn9WFlScHeri9+LLMmcBD3GMxnt9Zu8ptg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:15:8b:c3:00:f9:51:c6:dc:03:f7:ae:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=6d3bb546c29635b52c816a4ebadc1eb63b0d60ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:60:6c:fd:52:cf:40:76:5d:98:ea:d9:a8:
de:93:44:63:4e:f5:09:da:f4:10:c9:fd:ee:83:30:
eb:ce:25:92:9c:e0:6a:ea:6a:41:da:1c:99:a8:43:
40:61:d1:d8:a4:80:16:79:f9:a8:fa:6a:fe:b7:07:
b2:71:03:b5:5e:7b:d2:f6:a1:26:18:39:ff:76:37:
70:cd:eb:be:e7:90:17:af:69:26:15:25:3f:16:ac:
62:ba:4e:51:cf:ba:6b:47:2b:fc:77:03:ab:21:b0:
bf:d6:5f:65:d7:f3:4c:af:f5:db:c8:ef:de:60:0d:
91:74:50:70:ca:f9:4d:33:f6:19:a8:d7:ef:40:47:
2f:b4:17:fc:f9:04:fb:24:90:82:47:19:68:f1:da:
a8:b2:f0:b8:dd:e2:a9:01:53:a0:ba:dc:d4:bb:eb:
7e:59:b2:e6:bf:4b:52:f5:f8:59:b5:3d:f9:92:32:
96:ef:23:2b:d2:e5:fd:67:ba:a1:c9:ac:60:89:37:
9a:02:31:42:1b:68:91:72:f7:c6:b5:b2:3a:b2:a3:
c9:d9:97:eb:6a:57:70:3d:0d:8d:f7:3e:33:5d:28:
fe:85:0a:09:f2:17:dc:73:dd:c5:8a:af:3d:72:4a:
7c:9f:67:46:e8:e2:b2:78:1f:b5:bf:9a:1c:03:66:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:B5:46:C2:96:35:B5:2C:81:6A:4E:BA:DC:1E:B6:3B:0D:60:AD
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:f3:38:98:c4:2b:21:35:9b:4e:2b:7c:22:67:a2:32:95:
26:43:72:18:d1:25:ea:4a:84:c1:01:25:21:03:4a:49:aa:6d:
c0:27:e0:e8:7c:13:73:86:68:bf:57:44:fe:ad:34:6e:06:14:
5f:ee:3a:ff:60:c6:ef:33:6e:a5:33:41:25:aa:99:be:24:23:
7b:63:80:04:2a:c5:2f:d0:d6:d6:1f:e0:3a:5e:cd:c2:28:4b:
f1:16:72:ab:80:bc:15:d3:99:85:b6:3e:23:8a:13:fa:29:aa:
74:d1:c0:db:57:24:98:a3:a0:22:5b:f3:57:3b:15:c8:77:31:
7d:7f:cf:8c:db:88:08:b5:a4:0b:f2:ae:bc:01:a7:f0:60:66:
25:20:c1:19:cb:90:fd:4f:0a:e5:e7:65:75:88:a5:ef:22:7d:
40:28:13:c3:9d:46:7f:76:10:7c:e8:a9:56:ea:e4:c0:81:6b:
f6:5b:07:85:15:ee:3e:a8:05:93:0b:47:a9:f8:0e:bc:e9:7e:
14:18:8f:46:3d:7a:82:d0:16:ce:a2:9e:66:c8:d3:2f:27:97:
8d:f7:33:a3:08:7f:e0:43:7d:de:f7:4f:48:e1:e8:5c:0f:1c:
1f:73:83:c4:63:35:4a:93:c1:da:0c:e5:03:b7:9d:de:b3:9c:
49:03:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:50 2025 by rpki-client