Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: Zg9thxFUBiPGl+XUiFDPHg0JkxNyZpawIkqWe37KyaI=
Subject key identifier: DA:4E:A1:88:BB:06:4C:AC:7A:94:BB:5A:FB:2E:1A:69:5C:08:B8:9F
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 019A73388CCFA2B79B357FFFE02246B5FF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:01:17 +0000
Manifest this update: Tue 11 Nov 2025 14:01:17 +0000
Manifest next update: Wed 12 Nov 2025 14:01:17 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: +5xybTfVTClUuTSeQgRsV+5muXruJ156PqFnojn1LYs=)
2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8c:cf:a2:b7:9b:35:7f:ff:e0:22:46:b5:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Nov 11 14:01:17 2025 GMT
Not After : Nov 12 14:01:17 2025 GMT
Subject: CN=da4ea188bb064cac7a94bb5afb2e1a695c08b89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:1b:6f:d7:49:0c:5b:d5:3f:c4:42:54:97:
4a:7b:f7:b6:65:07:c7:41:7f:21:57:d6:e6:35:b1:
be:57:be:b4:39:b8:31:8e:e1:38:01:f0:27:d7:0a:
52:7e:01:ce:b3:59:43:a4:eb:6b:bb:e6:4d:71:0e:
08:b9:f8:2b:1f:87:ad:2e:89:83:a0:6b:e1:7b:42:
59:a1:14:6f:0e:78:28:59:0d:02:7e:19:1c:03:2d:
a2:51:45:2d:58:f0:5f:78:28:91:3e:d9:20:81:f3:
99:f0:93:a1:18:c3:93:eb:73:89:f6:5e:99:34:77:
5b:63:79:3d:62:23:b7:94:2b:1e:1e:85:7c:bd:82:
95:c6:f8:c7:db:56:b6:52:45:02:64:c3:c7:7b:f2:
55:7c:0d:eb:30:a7:33:dd:26:bb:e4:0f:1e:8f:44:
3c:0b:05:25:26:0b:d4:d5:ac:58:11:ff:85:4b:b1:
0a:e4:65:67:66:57:33:05:19:f8:8e:7b:77:a0:21:
66:8e:36:21:c5:72:2d:59:9b:66:1e:63:f9:89:16:
fc:e4:2b:18:c3:42:e2:2e:ac:b8:6e:c4:99:1f:b5:
d2:c7:e9:90:bd:7a:64:ce:81:52:06:82:7b:cd:1e:
8d:76:30:e7:30:5c:c8:3a:78:e4:02:0a:83:2b:da:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:A1:88:BB:06:4C:AC:7A:94:BB:5A:FB:2E:1A:69:5C:08:B8:9F
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:20:46:de:bf:2d:0a:55:08:7c:7a:1e:bb:9b:8d:a9:52:
d2:47:3e:28:50:a7:d7:78:1d:58:b0:ee:d2:b3:80:20:27:ae:
9d:d6:5b:f4:c1:a3:71:ee:1e:34:8e:cd:72:4b:f0:5e:c0:ca:
77:4b:da:00:9a:f7:ac:1d:d0:09:e7:1e:67:13:f4:71:84:41:
74:99:2e:f4:27:e7:07:97:94:78:e4:ba:4f:8e:f8:8b:94:44:
e9:4c:3d:3d:c7:2d:d4:bc:64:86:d6:50:63:c8:97:ca:d7:d1:
6a:84:03:5f:3e:0a:a5:81:f8:72:23:69:c5:e9:2f:ba:2c:64:
b0:c4:93:5c:71:55:39:73:15:c0:59:1e:4c:f5:09:50:21:6d:
dd:27:7b:30:38:89:4e:6e:2e:40:aa:8a:0c:9e:4e:5d:18:c8:
15:ae:92:69:00:7e:e6:8d:5f:3b:90:9e:27:47:1c:d2:01:56:
46:d8:74:a7:dc:9a:b4:55:0d:2f:78:2b:5a:f0:ed:ef:67:e4:
99:13:e5:1e:e7:60:45:67:0f:1c:93:ef:ee:9e:25:96:4a:71:
9a:3e:fe:ed:53:5f:60:f4:8e:80:e9:87:3a:0d:38:8f:bc:a7:
54:da:63:93:e8:69:f7:dd:bf:e7:93:5a:a3:18:d1:da:ed:bb:
08:01:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:47 2025 by rpki-client