Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: 6Bu7lnhTCb6rIrKQdOb/skVpx3uXEeCcK5x+XGM5DOQ=
Subject key identifier: CB:01:8D:03:67:12:3E:E2:00:AC:2D:8F:71:D6:DC:38:C9:04:61:52
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 019A72CA2CB68A8DF8CA20D78DD70C858BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 14DB
Signing time: Tue 11 Nov 2025 12:00:43 +0000
Manifest this update: Tue 11 Nov 2025 12:00:43 +0000
Manifest next update: Wed 12 Nov 2025 12:00:43 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: DvYbCmbB795eVq9XfzPkj1Wix9/Y3w4BkJNdGU7amk4=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2c:b6:8a:8d:f8:ca:20:d7:8d:d7:0c:85:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Nov 11 12:00:43 2025 GMT
Not After : Nov 12 12:00:43 2025 GMT
Subject: CN=cb018d0367123ee200ac2d8f71d6dc38c9046152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:7c:c6:ba:1a:1b:06:b7:f8:34:37:fa:07:
11:94:9b:56:ab:c7:91:b4:0f:19:bc:be:a1:37:2c:
e3:a3:55:29:f3:9b:50:fe:e6:4c:d6:54:cc:f6:07:
6e:e0:f5:29:f9:f7:02:97:10:b6:b7:6f:d6:da:5b:
b4:99:6b:ef:77:67:e6:ab:f3:f7:56:f6:fe:5b:7f:
ee:7b:68:00:cf:c2:8b:9d:00:16:fd:3c:6d:40:0a:
62:80:1b:2b:c0:bc:04:74:56:2f:39:fa:3b:03:ab:
66:18:81:75:64:fa:ca:89:f2:d0:fc:16:b9:c3:c3:
20:6e:18:48:fa:21:66:64:9e:a4:d9:cf:6f:a5:40:
99:ef:a1:a3:72:84:38:e2:9b:86:f8:04:7d:37:a6:
84:65:6d:47:d7:de:7f:74:28:73:e9:0d:e9:76:d7:
85:18:38:80:40:e5:be:7d:ad:76:ba:c1:1e:3f:f9:
af:de:37:77:71:7f:53:e6:b6:47:b0:2d:bc:ee:6f:
8b:ca:1c:ef:3e:d0:f0:ea:9d:0c:d1:53:65:51:ee:
f1:81:9d:34:7f:4e:84:40:94:44:ff:c2:f3:82:0e:
5b:a8:9d:e6:6b:35:8f:84:61:37:b8:ef:eb:93:6b:
d3:42:fb:99:f3:b2:06:ab:bf:0d:af:37:79:5b:c2:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:8D:03:67:12:3E:E2:00:AC:2D:8F:71:D6:DC:38:C9:04:61:52
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:bc:47:dd:07:8b:7c:a0:5f:25:3f:89:b5:53:a0:8b:f4:
65:f8:10:db:9b:68:30:95:80:d0:a0:0c:c1:62:b1:2f:66:b3:
67:49:d6:e1:d5:7e:d4:53:20:d4:af:6a:88:69:23:d0:ae:9f:
32:a4:ef:e2:0a:ab:bc:96:64:d7:47:6c:a0:44:c9:93:63:3e:
1b:23:0a:fe:7f:51:e7:1e:18:5f:aa:5c:4f:b4:dc:df:50:79:
b2:8e:b5:e3:25:f1:e4:4e:db:8e:a3:7c:1a:e3:c4:98:55:67:
f9:0f:32:93:87:c3:8c:20:39:9d:eb:fc:85:46:a2:78:63:43:
68:08:3a:69:74:f1:26:0a:23:14:1c:a2:24:4c:b8:ba:27:74:
d6:c6:d7:80:17:0b:6d:5d:fe:2d:f7:81:d0:5c:7b:7b:43:40:
73:ad:38:4d:f8:7d:ad:13:99:77:23:a4:fd:74:b5:0c:e9:b0:
a4:0c:1c:46:34:e7:4e:9f:bf:28:16:9d:83:2f:0c:9f:ed:61:
bf:52:1c:c7:9b:9d:ce:db:86:fc:ff:18:8f:b2:d3:23:d9:af:
5d:8c:91:30:16:ef:31:fb:04:10:a3:2a:78:ce:8c:3f:81:b5:
28:eb:ab:1b:d2:98:60:a5:78:c9:36:00:e3:73:ec:ac:ed:79:
7f:1f:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client