Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: ldgQXoPBfA7YstpcfrOLTdsn25dEuSYvy7tIdFX/Pd0=
Subject key identifier: 6E:5D:DA:2F:51:65:27:E6:8D:C6:1A:BB:A4:61:22:E3:0F:1D:8E:0F
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 019A722585AEADBE0EAF7BAE1643021AAAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 11C1
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: WoIu3FvUiEF25WxO95mvP1Zw86ga4qZRD4r4LdLx6eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:85:ae:ad:be:0e:af:7b:ae:16:43:02:1a:aa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=6e5dda2f516527e68dc61abba46122e30f1d8e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:6b:33:48:a0:dd:71:33:fe:1f:5c:6b:94:
e7:79:67:59:f7:ce:0b:eb:a7:bd:17:8f:69:42:e2:
7e:bd:e3:0f:71:ce:9e:90:e4:a7:ac:36:1b:da:3b:
8f:fd:89:c5:91:be:7e:bf:a4:d9:de:a0:d5:25:15:
08:5b:04:60:12:b9:df:5a:b3:ca:2c:ba:2c:28:e7:
7e:f2:52:29:80:82:92:88:31:92:bc:d0:84:e7:6b:
fe:ae:6c:2f:2d:65:3b:e7:7f:97:59:0f:eb:e1:c4:
70:b0:9c:01:07:de:78:ec:f7:06:4d:87:29:b1:c1:
71:bf:f1:df:1f:a9:85:fb:61:fe:be:d6:98:22:59:
49:ea:4f:75:15:04:7b:eb:48:b0:e4:58:40:57:22:
e6:61:65:7b:b1:4d:00:f4:5d:72:56:e1:d7:fa:f4:
77:4a:66:28:72:b4:6c:d6:47:c9:a1:74:cf:8f:17:
cc:63:d3:bb:fe:a0:2c:6b:8d:6e:60:89:0d:20:b8:
cf:a6:5f:be:b8:e8:d0:6e:43:a8:2a:06:a4:7e:34:
4b:96:6c:29:4d:08:49:f5:6b:4d:dc:15:c0:0c:27:
08:89:74:b4:07:ef:41:93:90:e8:b9:48:1c:a8:b8:
e8:f6:5a:f2:2b:f7:9d:20:17:4a:6d:6e:78:01:2b:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5D:DA:2F:51:65:27:E6:8D:C6:1A:BB:A4:61:22:E3:0F:1D:8E:0F
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:55:3b:e9:19:0c:ac:d3:29:95:54:fa:73:49:db:f6:1e:a5:
5b:36:67:46:4a:b2:85:56:0a:15:9a:e4:c8:90:4b:10:a6:d1:
02:a4:16:7b:08:d7:11:56:47:5f:28:72:4b:b4:b3:43:f4:7f:
0e:99:97:47:10:d7:a5:5f:34:32:97:42:17:f5:24:17:91:24:
7d:a3:d4:45:fd:dc:83:d5:70:a6:14:ba:df:eb:ee:cb:c5:72:
bf:eb:03:61:af:b2:80:9b:73:c5:63:46:a9:95:5c:c5:4d:99:
93:e8:ae:e4:5c:6f:c3:b8:1d:f7:d4:af:a6:98:a6:fa:95:0a:
02:27:b2:19:d9:b9:f4:06:97:e2:f1:79:f4:68:b4:46:bd:8b:
79:8b:8e:23:c3:2b:70:8d:c3:f6:b3:16:44:14:d5:85:0e:be:
47:1f:77:77:01:7c:a9:32:1f:69:7b:05:8f:da:40:09:c3:2b:
05:16:68:87:fc:b3:8a:63:ec:2a:22:57:0b:31:b7:d5:76:d0:
66:c9:f9:f5:7e:f0:37:1d:d4:83:cc:cd:05:3e:8c:e2:d0:70:
38:84:65:dd:42:3f:06:85:e6:7d:6e:01:3a:49:a9:27:77:dc:
0c:ff:5a:e8:e8:74:52:2f:20:34:50:a8:cc:a2:48:f3:bc:cb:
d4:11:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client