Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: q3vrZe+flT86T+uoGuSH0yFjoMO/09iZd6JfWpfibY4=
Subject key identifier: 73:9B:59:38:E4:16:EF:F8:77:57:DF:31:A9:2D:6F:64:63:73:15:29
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019A2D445C672EC91474842B3D5EF640A053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 038E
Signing time: Wed 29 Oct 2025 00:00:46 +0000
Manifest this update: Wed 29 Oct 2025 00:00:46 +0000
Manifest next update: Thu 30 Oct 2025 00:00:46 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: rlq6sVfiMErkdWmlI1Codw3r0XeuPnqCTJw4qM2/7ps=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:5c:67:2e:c9:14:74:84:2b:3d:5e:f6:40:a0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Oct 29 00:00:46 2025 GMT
Not After : Oct 30 00:00:46 2025 GMT
Subject: CN=739b5938e416eff87757df31a92d6f6463731529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:8a:33:00:37:29:a3:0a:c1:d0:41:73:9c:
cb:8a:0c:1a:c2:3b:4b:b5:d4:43:0a:e3:95:6b:b3:
d3:07:60:87:b2:e3:4a:a9:a9:4c:27:1d:23:10:bd:
f7:5c:1b:a3:3c:dd:d5:c4:bf:89:37:35:55:fc:3b:
f4:1c:5d:a6:7f:d3:f0:46:0d:1d:de:0c:28:e0:6a:
1f:13:62:d2:7b:49:aa:c9:8a:06:55:25:9c:5a:8d:
cf:ca:96:d8:12:24:9f:13:87:89:a1:2c:92:15:4a:
8c:5b:86:28:34:9e:cc:d9:6a:2b:36:00:2c:49:a1:
e5:c0:d2:ff:f4:af:bb:fc:81:fe:85:b8:77:f7:d8:
8d:62:77:9e:aa:ab:cd:8d:f9:96:46:5d:d0:a0:60:
94:e6:73:13:8b:97:a3:89:fb:6f:8b:64:ab:18:03:
35:b6:9b:c8:e9:9d:6e:cb:ae:42:c4:d7:b0:d1:00:
44:69:75:c4:9f:47:8f:7d:b7:66:6a:c3:f6:a8:78:
3c:57:1e:0e:8b:0b:b3:6a:ed:42:04:92:6d:85:a2:
ed:03:5e:37:06:58:44:e6:11:c4:03:a0:61:ef:84:
80:a8:4c:1a:ee:2c:1f:33:6d:1e:0d:3a:58:c8:30:
9c:55:1f:16:88:b4:77:ed:7e:08:4d:e7:87:77:29:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:59:38:E4:16:EF:F8:77:57:DF:31:A9:2D:6F:64:63:73:15:29
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:17:0a:2b:99:4c:c6:14:17:9c:92:37:1d:74:e7:6a:a4:00:
19:43:b5:6f:e7:10:35:b4:ef:82:70:d7:0f:6c:16:d7:ba:20:
ef:bc:d1:34:0b:26:4f:a6:1b:a2:fb:08:69:04:e7:2e:c2:3e:
4a:54:09:2e:a7:ed:33:e1:40:29:4f:82:c9:91:b8:93:7f:df:
f1:91:0d:ca:80:4e:d4:ac:03:1f:c9:c1:94:d5:77:b7:10:ca:
26:c0:fc:03:6e:64:47:9c:d6:75:5e:2d:ab:b7:c2:b7:87:09:
73:b0:50:73:96:8d:ba:17:82:a9:66:3e:74:45:49:c3:69:9f:
d2:ff:d0:12:86:aa:e6:c1:2e:40:ec:0a:0b:bf:f5:49:4d:4e:
d7:89:d1:fe:4e:46:c2:8d:48:63:44:2c:fb:06:ad:44:5d:ab:
89:98:ed:42:0d:bf:89:8e:94:6b:df:c5:88:5c:84:36:6f:b7:
96:0b:43:04:fa:09:1b:a3:5b:28:b8:67:c8:bf:9c:60:ff:03:
59:d9:74:3e:ba:d4:f9:7f:71:6b:78:8e:1a:9f:e3:8b:e6:54:
b8:b9:71:ba:a3:9b:54:fd:cc:f7:11:32:25:26:28:62:72:0e:
b0:a2:19:a6:e9:11:2e:90:a1:0e:a0:80:e8:3c:31:ce:e8:06:
e1:6c:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:28:57 2025 by rpki-client