Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: 0hsHqW9Z3VQCwDKiTtl/ZDPvqfsA0LoNPhUQa9tIth8=
Subject key identifier: 80:85:35:6E:14:F9:E8:60:C5:C3:B7:20:8A:AD:42:AC:2E:20:18:5D
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019A71B7C18D8B6A2B6931B8D5F0FC03076E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0E28
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: v3rKhfqUG6KGRCoOlbtVAzwuNtmojWDA/8MBGBvUlVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:8d:8b:6a:2b:69:31:b8:d5:f0:fc:03:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=8085356e14f9e860c5c3b7208aad42ac2e20185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:ad:fa:9a:58:ac:ed:d8:e7:4b:7c:fc:c4:
de:b2:c9:4d:96:52:5b:9a:0d:0c:11:3f:31:b2:c2:
8f:b6:a3:3a:c2:98:a9:b8:8d:69:ed:fd:88:89:73:
2d:69:4f:4f:4f:72:7d:da:fa:da:f7:d3:2a:cc:b1:
8b:63:2e:d1:72:2f:45:de:37:ba:6f:df:7d:a2:76:
d7:34:87:31:3d:a2:63:a3:d3:d5:d7:a6:59:0b:08:
f4:80:a6:ae:3c:70:a5:7b:1e:37:27:e8:f4:ae:12:
76:ae:8c:b5:e1:43:2d:39:da:68:e4:46:9b:a6:01:
fb:0a:b0:ac:17:61:a5:4b:e4:59:05:1e:6f:79:e2:
91:50:42:bb:9e:46:c5:16:f2:9c:09:86:2d:f4:7c:
7a:a5:b9:1a:bb:8d:c5:63:ed:8f:fe:9b:2e:d9:3a:
a7:34:04:8d:c4:18:bd:27:14:04:2c:9a:b2:e2:d1:
2e:3e:85:be:31:3b:8f:30:13:b9:60:66:22:75:6c:
89:59:98:d0:c4:8b:2a:4f:dc:29:4f:33:ed:84:be:
41:40:25:e2:58:9b:5b:f3:d2:8c:9b:b4:89:a0:af:
e5:b7:57:17:27:05:0a:bb:90:9b:91:94:ef:a3:b6:
32:52:56:0f:00:4d:7e:45:63:b4:be:5f:d7:ad:c8:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:35:6E:14:F9:E8:60:C5:C3:B7:20:8A:AD:42:AC:2E:20:18:5D
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f4:f7:61:24:4a:b9:1c:17:d6:fe:b2:63:64:89:c0:0e:e9:
8d:5b:e7:82:37:a7:be:18:4a:ce:f1:7d:b8:d2:5d:1e:e3:79:
9c:06:02:7d:d8:e4:3c:d6:62:4f:10:9c:0b:bd:04:6c:cf:28:
89:a1:67:20:e0:46:52:eb:0f:b8:93:fe:f8:c4:96:97:16:41:
55:25:37:08:e3:2e:b3:73:6d:af:30:c4:44:b8:b1:4d:55:1f:
05:14:3d:38:55:f0:39:12:f8:57:9a:e3:52:4f:76:06:49:d0:
2a:24:0c:7d:9c:03:36:c0:c3:9b:29:e3:9f:46:c2:06:b1:9d:
14:71:d5:47:1b:18:b9:69:bd:5d:32:69:f1:37:7b:1d:d0:9a:
18:91:c1:21:70:c3:d8:d6:da:13:1c:d7:6b:b2:5b:10:b1:51:
d4:49:f0:d0:8c:3d:ca:78:a8:93:93:72:d2:32:18:68:d4:44:
53:94:10:32:bb:d0:17:f3:5e:80:02:2d:07:c4:ef:6e:3f:db:
c3:72:7e:cb:20:c2:21:93:8e:77:00:d5:e9:dd:df:c5:9e:f6:
64:bd:bf:44:01:83:a2:ad:fb:5c:57:30:20:5f:ba:0f:1d:97:
e7:98:38:07:be:f0:54:8c:b2:14:04:9c:6f:98:76:d3:e3:6a:
53:63:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client