Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier: uUh3GpJO1QGKWO40bp3WgI6EpcjpWbr4AbnkOJX+M3M=
Subject key identifier: DC:BD:E0:86:BB:26:8A:F2:AA:C4:06:01:AA:5A:74:1C:A5:85:DB:FA
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 019A7225A62382D7B0CDF3531675912B5A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number: 0219
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=)
2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: OCp/tHV/Q8YiBMQSjQLvP+HaUGNNW1wGazekUH96CiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:23:82:d7:b0:cd:f3:53:16:75:91:2b:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=dcbde086bb268af2aac40601aa5a741ca585dbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:33:de:3b:93:14:c4:17:1b:ec:33:88:d4:
cb:23:cf:01:46:52:06:b8:ce:63:fa:0d:16:02:ab:
13:1d:42:46:b8:1c:d2:7d:28:6b:e9:60:df:e6:64:
e6:e7:dd:77:6a:72:71:ae:22:2f:eb:47:7f:5d:00:
a8:df:5b:9c:c2:d8:36:fb:7c:c4:2a:3b:f6:6b:cc:
94:8e:74:50:f5:90:c5:fd:3f:5e:48:ac:23:12:e5:
6a:6d:b3:45:10:c2:4b:84:6b:80:d0:60:7e:6b:6a:
2e:5c:6a:a1:6f:a9:94:2d:07:92:08:ff:d8:e7:3c:
e4:ef:7f:2c:80:56:ed:db:4b:c0:a8:9c:f9:ca:4e:
14:45:bb:0c:19:3b:e3:4a:75:5e:76:87:15:c5:39:
d4:e1:f1:6c:f8:a2:df:c6:94:85:b4:fa:e2:3a:39:
ec:5d:37:28:e1:72:a2:0e:4a:a0:2f:8a:89:46:7c:
88:d3:2a:c1:ef:ef:42:76:a4:49:5e:93:f9:65:17:
dc:cc:22:76:b6:b4:ab:ca:7b:f4:15:b6:97:a3:65:
32:fa:64:e5:8d:4d:2c:47:c8:ee:61:d2:df:3d:44:
10:19:c5:c8:83:bd:cd:0f:76:24:81:b0:e5:09:91:
81:54:00:e7:fb:18:fb:bc:a6:17:ee:23:fe:86:4d:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:E0:86:BB:26:8A:F2:AA:C4:06:01:AA:5A:74:1C:A5:85:DB:FA
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:7e:35:23:c6:16:e7:8d:cc:a5:9b:1f:7f:9f:b3:bc:e9:
ee:c7:42:40:3b:7f:9c:45:39:97:ef:ef:c2:49:86:2b:3b:bb:
75:e2:60:90:b6:86:15:43:3e:90:6f:64:61:fb:c9:6f:b4:28:
c9:45:2b:5c:26:06:77:5d:af:6e:be:9d:d9:51:6d:c9:09:44:
9b:d7:22:48:62:8f:40:12:04:cd:c3:5e:c6:f3:88:7d:80:48:
89:e1:53:6f:74:15:2e:47:5a:03:67:fd:ad:69:4a:4a:24:13:
e9:48:5b:2f:bb:69:0f:81:dd:70:70:76:87:47:c7:ba:55:c6:
b7:93:ac:3b:e4:21:d3:c3:8a:37:77:5c:be:d5:a1:d7:15:5b:
2a:81:ab:09:bc:4d:f2:41:b1:21:4e:cd:73:a9:1f:31:41:5d:
f8:d5:e1:73:c0:55:2b:98:fb:18:2f:db:92:41:48:14:59:ab:
f9:94:a5:5c:9d:54:72:76:c8:6e:7a:48:b8:c7:8e:b7:5a:aa:
09:bb:90:d7:dc:a4:9f:6d:f0:b0:68:7b:dd:e1:07:ed:85:82:
32:c6:4f:1a:e0:ee:60:19:b9:39:d5:b9:4b:dc:ad:cc:37:0c:
26:7c:84:89:4c:85:36:eb:60:24:36:f1:69:bf:ef:64:38:17:
28:3f:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:12 2025 by rpki-client