Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
File: Vylib6kTE9VuTXZFVy_1gGH9T4w.mft (raw, json)
Hash identifier: SsgcFnpEDpHCxqSmhn+P5VCbRaESVKHy+5dPJbDQeJ0=
Subject key identifier: 7B:CB:C7:65:37:43:52:4A:2F:A4:F9:FA:02:13:07:1E:71:A8:3E:28
Authority key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Certificate issuer: /CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Certificate serial: 019A725CA3884334B67E4E3360A5ADF5A1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: 45ZEV-2i1vRdy90rokjRcQ4xSe4.roa (hash: ZhVSW3BK8XEZVGJDvUY2YgC4tkCCCyYXhiZwWu4Zbno=)
2: Vylib6kTE9VuTXZFVy_1gGH9T4w.crl (hash: kNwBVnXkPbnNcRyhDm8Fn+jIQQ2g2PWQj1Kpb+us7Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a3:88:43:34:b6:7e:4e:33:60:a5:ad:f5:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=7bcbc7653743524a2fa4f9fa0213071e71a83e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:ee:8d:4c:3a:17:e2:01:12:31:f6:d3:ad:
52:70:40:42:3c:52:57:30:8b:3c:7c:5e:49:bb:bd:
02:75:4c:25:d7:c7:d9:f0:b9:89:b1:de:3b:44:ea:
c5:1d:c3:16:f9:b2:bd:69:23:07:57:5f:6e:74:39:
b2:08:6c:e9:72:2a:99:1c:c6:74:28:b4:88:15:5d:
b0:39:da:0c:f7:3e:a9:e1:d6:fb:ba:c4:76:87:83:
0f:ab:8f:fb:ad:06:78:d4:b1:93:58:f2:0b:f6:4b:
d3:a2:56:ac:e6:ba:db:99:57:13:8f:8f:dc:d7:ac:
2b:be:d6:41:e8:5b:77:9b:10:e2:e6:09:0c:83:48:
c8:34:2e:a0:d1:90:2b:70:b5:7e:c0:4f:a8:56:4d:
93:09:28:17:04:5e:ab:a8:e6:2e:2d:c5:0b:9e:92:
0b:f4:6d:44:0a:75:63:f5:7d:25:77:98:d3:12:1f:
26:5a:67:ee:f0:cd:f6:97:e2:82:83:86:96:54:7f:
37:ee:17:34:98:a0:30:43:b0:e4:75:08:94:9b:a5:
15:db:ad:26:e2:97:24:bc:e2:8b:27:53:c4:f0:2f:
14:26:b6:bb:f2:fc:47:22:e0:5f:df:8a:6e:8a:08:
88:3d:c7:f1:26:9c:6a:67:33:f0:5f:cd:e9:16:bf:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:C7:65:37:43:52:4A:2F:A4:F9:FA:02:13:07:1E:71:A8:3E:28
X509v3 Authority Key Identifier:
keyid:57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:4f:e7:0b:86:22:f3:51:69:b7:15:a9:01:fb:dc:4d:70:
1c:67:26:c1:b2:ba:9c:92:14:6d:30:5a:1a:ec:18:34:1f:b8:
ec:5f:f3:cb:f8:d0:ea:5e:0d:8b:b9:ce:08:16:c0:90:8b:4e:
14:81:10:61:0a:5a:e6:52:9a:b9:a7:b4:40:d9:e7:56:2c:56:
da:f1:0b:7d:ae:b5:15:35:c2:55:26:bf:13:45:6b:a0:87:7e:
00:0f:42:2f:b6:07:73:a6:1e:7e:f7:4e:ba:e6:f5:13:a1:63:
41:33:c9:c6:be:97:b4:ee:db:7d:be:b4:e2:b4:ea:6f:c0:f8:
68:79:a4:4b:de:d6:5a:24:c4:c6:46:4c:72:16:26:ec:bc:07:
83:c9:12:96:fd:61:5e:f7:c5:96:eb:03:3c:d0:86:b3:23:83:
5b:56:fc:d7:8e:6a:7e:97:13:f2:d6:3f:0b:01:59:00:09:43:
52:28:2c:0e:48:55:8b:5d:4b:0f:14:f0:03:6c:c5:91:8b:90:
f1:70:b1:34:05:fd:a0:38:b5:89:2a:ae:78:5e:76:d1:6d:19:
bf:ba:54:95:94:c5:dd:59:a9:c0:aa:3c:a5:02:46:26:7e:7e:
3a:36:d0:b5:fb:4f:26:34:6e:f2:d1:a5:35:ac:a0:7f:02:17:
46:b3:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:21 2025 by rpki-client