Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File: VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier: eyNxESicQ9EXTq9cvWuszlRO1ROQ/1sXe4GVCGZ29Ms=
Subject key identifier: 31:96:81:17:09:0C:F6:74:F4:0F:56:63:81:10:A7:ED:F4:27:37:50
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial: 019A7112C5868E5E3C5EAA9747C12571CA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number: 05A4
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: OTrg-ZEc2BLcvUJfh8jjFvLHsBc.roa (hash: LhGZ4Fn8zvdKFROkrhPv5B9fTX3FdgJSPFLUgkfRUhE=)
2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: Hdn4IKFDMp+fpO+0RaFhte5SWAv8A6iNelkegGKSby4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c5:86:8e:5e:3c:5e:aa:97:47:c1:25:71:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=31968117090cf674f40f56638110a7edf4273750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:8a:b5:bb:66:5c:64:eb:e6:98:10:ea:c9:
6c:1d:a3:d3:90:69:d6:ba:1b:43:78:fa:3b:68:45:
94:59:0e:cb:62:9d:da:a9:0f:86:4c:61:5b:e6:18:
31:66:82:26:c8:35:a1:71:f9:f7:fb:a2:92:5f:99:
e1:92:5f:9f:51:17:4b:76:42:d8:d3:bc:3e:92:99:
6f:b0:b3:1c:b0:69:2e:cd:1e:0e:24:f7:fa:7b:04:
95:27:2f:c0:b2:c0:1c:00:27:d9:fe:bf:3d:13:21:
74:61:c5:7e:69:06:56:e4:7f:af:1d:3f:bd:fe:b8:
15:2c:27:e1:4b:60:77:b0:cc:c1:92:d0:52:cc:49:
a1:55:c5:16:c1:3a:6e:12:70:7f:dd:db:60:9a:28:
e6:4c:3f:79:40:84:66:ce:a1:8d:1b:cb:7a:9d:b3:
b6:49:5f:8e:a0:65:8b:0a:f5:ba:45:3a:01:65:9c:
22:55:50:bf:df:4f:0a:75:b3:9d:17:23:4e:c1:f1:
2f:e4:0a:09:e1:d2:1f:36:5f:c9:2c:4f:3e:23:ae:
16:b9:4f:14:28:60:f9:07:a4:31:66:4d:e8:25:bc:
4b:cc:73:a8:1c:a6:08:2f:66:8e:d5:ec:67:7d:3a:
cf:13:b6:b2:ee:e3:f8:ee:fa:1d:af:6c:26:e0:cb:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:81:17:09:0C:F6:74:F4:0F:56:63:81:10:A7:ED:F4:27:37:50
X509v3 Authority Key Identifier:
keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:09:f2:08:5f:ed:18:e5:06:05:e5:f6:36:66:c5:5b:86:aa:
af:df:be:84:80:82:61:03:8a:62:03:57:ed:c0:26:a1:56:87:
75:d9:24:68:11:38:2b:a4:9f:1d:74:87:12:1e:06:6e:e3:be:
3f:37:d8:90:1c:5d:0a:30:91:31:b8:a2:2f:af:ce:74:12:59:
b1:ed:ec:7d:82:7b:dc:65:4e:b8:dd:b2:99:6e:02:30:8e:86:
ac:0f:3d:31:a9:13:d2:8b:4d:a0:28:e2:f9:a2:16:14:3a:18:
b2:e0:fd:73:0f:91:c5:b7:cb:cc:0c:c8:49:fa:f1:c2:2c:30:
e6:87:cc:de:e9:0f:ec:f5:13:3c:fb:f6:3b:d2:8b:a9:00:1e:
00:52:2d:0d:f1:30:fc:10:57:5c:81:8a:96:a1:ce:dc:5e:98:
3c:f5:87:d3:bd:be:09:be:e3:09:ae:a9:18:ea:f2:2f:12:e3:
ce:98:99:79:80:92:9f:43:3a:f1:30:b0:fe:32:41:41:d5:ea:
f3:66:0e:04:60:4b:bc:96:b4:88:11:de:3a:c2:71:bf:24:75:
c1:b0:98:8e:e5:57:73:0b:45:6d:ea:d2:93:31:11:5a:ec:86:
95:8d:ac:1e:29:35:d5:ec:49:38:0b:fd:3e:b3:f5:ba:a3:7b:
d4:7d:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:34 2025 by rpki-client