Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: v/vNt+PA4VuGdz5io4TkwgzxakgDo5HfGgBrNk+dj7Y=
Subject key identifier: 21:A6:5D:1A:C1:B5:B3:AF:62:48:22:01:5A:62:21:3B:C8:35:5A:BF
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 019A7112ACB8751FA45164139A68B3DEE62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: Psd54iYoCOugTMWCAQiTw85ZPODljIbjchNFxeWGUx0=)
2: bQmiKmxRas6gwm4qSwSUII9p9mU.roa (hash: jmcf31yXuENJXS3Y84r9JPwgzj5rMdnN5KsOAuYq2Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ac:b8:75:1f:a4:51:64:13:9a:68:b3:de:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=21a65d1ac1b5b3af624822015a62213bc8355abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:1e:50:e5:82:b9:52:c9:36:a7:4a:19:98:
39:a9:58:ae:e2:c4:70:89:d6:72:1d:dc:99:63:a1:
89:0b:90:4b:e3:fe:b0:41:d9:02:12:c8:05:60:3d:
56:6f:98:d6:59:f9:ca:ba:c5:35:ac:65:c6:8a:fd:
eb:9b:33:0b:c7:62:26:8d:95:ac:cd:ae:96:d7:74:
d6:0e:04:28:2e:21:7e:55:31:cf:58:e2:cc:6d:45:
4d:c9:6d:83:24:0f:a7:88:4d:ca:2f:bc:5b:7b:9f:
f9:ab:88:ad:e1:1d:38:59:7e:09:66:ab:15:25:24:
e8:13:1c:6a:f4:75:bb:3b:b6:36:47:d4:09:c4:09:
92:30:3a:80:95:6c:06:97:a5:13:e1:2b:d4:a4:ca:
ea:69:e5:7c:c8:b8:0d:7f:9c:e1:ce:dd:94:93:e1:
49:4c:71:7f:b8:e8:24:dd:fb:73:2d:8b:70:57:11:
0e:c4:51:33:fe:23:ae:67:b3:7e:65:d8:62:dc:23:
8d:79:c1:cd:59:66:de:7d:c0:f5:c5:01:ff:c4:5c:
4b:6f:35:4a:8a:83:ed:6b:6a:69:14:00:a2:f8:37:
87:d4:2c:f7:d3:74:84:ff:13:de:63:b3:6f:30:e0:
52:b3:2d:b0:95:12:8a:d2:8b:de:be:5c:5d:df:25:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:5D:1A:C1:B5:B3:AF:62:48:22:01:5A:62:21:3B:C8:35:5A:BF
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cc:27:33:5f:4a:7a:97:7d:22:fc:48:5e:52:e5:8d:fb:51:
f1:bf:c5:24:3a:60:04:9e:27:8e:92:3d:70:a5:e3:3f:af:9d:
6a:99:ef:ec:22:56:78:3c:ef:20:42:d2:75:99:03:ca:77:eb:
86:51:0b:df:70:0a:35:42:9b:ba:35:e4:74:d0:51:c5:2c:94:
1d:77:e0:f5:a1:1d:19:95:aa:12:bb:40:e4:3f:bc:6c:5e:5f:
64:5b:a8:1a:73:db:ac:bf:ef:ab:b0:3d:94:00:8c:72:8e:21:
9e:7d:b8:e9:16:a6:1c:64:dd:50:fd:37:ff:a4:09:2f:1c:d2:
ab:9e:b6:d5:75:d1:60:a1:1b:fe:76:c1:33:e7:a7:9d:55:24:
c8:e8:b8:17:4a:ec:29:3b:2a:2f:ad:cf:b1:16:b3:39:54:77:
ee:4b:58:d9:ee:3e:d5:15:d0:9c:0f:f0:67:77:b9:fb:43:e5:
7e:7c:b5:f4:bc:48:87:7f:7a:60:fd:98:a5:ab:ad:79:ff:8b:
af:31:41:83:e5:0e:bf:28:2c:ba:32:65:72:14:b4:77:e3:e9:
b0:e4:9e:ff:6d:3a:fd:1b:8f:c8:58:72:e8:b2:4c:61:e1:5b:
8c:50:11:cf:fd:f9:64:a2:3c:35:3f:be:a9:dd:85:6f:a2:df:
83:5d:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client