Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: PzWcLx8zyNKtXaGddzjesMdKVggDiQIrh1IZvdz0VFA=
Subject key identifier: 5E:0A:BE:38:EC:A5:FA:21:46:5D:3A:18:74:3D:93:51:2E:18:23:2A
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019A72934B52557B8D095960CBFFF2D7AB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: 3Qhj7WImT+WTw4wVtpPa8R0hQ2y4wQeH5ZG0ZQua/uw=)
2: ViwcSn5ZRd0_PQfWGy4jthVrawY.roa (hash: TCVE8gL/0uqzfZRMUKYxUNskH8cEgUmyJYuVh+KEfZM=)
3: r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa (hash: /vknbDgQuhM62eluETPZRwPfDO3C56/MY/cEqhgERrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4b:52:55:7b:8d:09:59:60:cb:ff:f2:d7:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=5e0abe38eca5fa21465d3a18743d93512e18232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:ae:2a:de:07:97:b2:98:5e:6d:06:d7:cd:
3d:cc:04:9e:fa:35:d2:e9:08:aa:e6:ad:d3:fc:24:
92:20:3b:1d:1d:a7:ba:0b:a3:d1:07:d3:9c:c2:06:
cc:17:e4:ce:1d:f4:e4:11:49:ab:ed:85:9f:50:93:
36:cd:92:ac:ba:ac:38:9c:68:4e:98:84:84:41:3f:
1f:a3:73:bf:d1:92:4d:22:89:e9:8b:77:e4:07:65:
9d:9d:8c:53:2e:58:cc:59:79:ff:0b:65:a6:36:df:
4c:36:0a:c2:7b:23:8c:50:9d:21:0b:54:c6:80:6f:
c5:22:83:35:8a:35:a4:7b:45:20:7b:81:cf:dd:8b:
a1:90:a7:c6:ec:d4:c4:38:67:8a:f0:f4:e5:e4:da:
78:99:f9:45:49:4d:d3:bf:30:70:a3:86:40:6f:2d:
56:73:fd:dc:6b:d7:0e:d8:9a:32:01:a7:7e:7d:a2:
1c:c7:32:a9:7e:d6:78:6a:28:cd:2b:0f:72:91:ff:
85:ed:fa:b2:18:31:84:b7:6c:bd:ba:b0:cd:ce:84:
ed:37:d5:d3:9b:e3:33:a9:9e:37:5a:eb:79:77:07:
3c:84:dc:60:18:de:e7:2c:32:9a:81:bf:c9:a5:4b:
44:72:73:30:24:03:24:1f:0e:79:56:7b:53:2f:8a:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:BE:38:EC:A5:FA:21:46:5D:3A:18:74:3D:93:51:2E:18:23:2A
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8b:c3:b6:65:c8:18:d5:6f:08:0a:1a:c2:57:26:d5:15:16:
05:14:f0:ba:fa:b3:24:ec:bb:6e:c1:7d:11:74:81:95:19:36:
1a:95:38:cf:31:30:49:20:6a:1c:6a:a8:8e:f9:06:98:f2:d2:
01:d7:e7:f8:a0:f6:26:84:d9:9f:e4:72:32:e6:e7:05:fd:d2:
37:14:56:51:5c:5a:e7:a0:19:0c:6d:52:cc:80:7e:7e:3a:cd:
3a:35:bc:83:07:3a:a6:7d:9e:20:35:f6:d0:34:55:70:78:57:
c1:21:65:01:7a:70:59:02:12:51:5c:59:e3:8b:ad:90:37:ab:
43:ca:f1:7f:37:e6:d3:42:3d:89:f0:75:94:c9:3f:1c:1b:15:
68:1e:ed:a2:8d:6a:0a:24:30:ed:6d:50:98:c5:b5:f0:11:b8:
07:4e:25:a4:3b:1f:18:dc:74:dc:f9:4b:22:22:e6:d5:d4:e6:
84:bf:0f:a1:1e:a3:a3:44:e6:b0:4f:b2:74:3c:08:75:c4:3f:
78:be:ee:bb:c0:59:7b:6b:3a:00:99:06:b5:d4:f1:79:9c:3b:
65:d1:4a:e7:e1:cf:a5:81:05:00:36:ef:5b:ff:58:21:7f:82:
bb:71:be:75:32:3c:d4:5d:18:63:87:bb:f5:6f:47:93:dc:2f:
4e:27:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:52 2025 by rpki-client