Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
File: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft (raw, json)
Hash identifier: aIUfvM5j3eXHTQ6dCuZWFJn50JjbGl6ACloOreY8Wfk=
Subject key identifier: 30:DD:1F:C7:EB:F1:48:82:83:44:E5:E0:45:13:8A:95:99:AB:23:A1
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Certificate issuer: /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial: 019A725C64136B537021B6C2BF3C7E7961BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
Manifest number: 10AA
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl (hash: NysP8FxP5Wyyg3FwHhslYYJCXLfC187HChZvRL523ig=)
2: jDVkyBiMy_wS7uuT7gJm-Adjujs.roa (hash: EB3eY2DbzGQXtFYTivd9InheAMXSnzGFEr2+zEc8wPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:64:13:6b:53:70:21:b6:c2:bf:3c:7e:79:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=30dd1fc7ebf148828344e5e045138a9599ab23a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:40:5d:bd:a6:d9:49:5e:47:6c:d8:ce:e3:
7e:e7:c7:75:18:1c:c1:d3:e3:2e:ba:ec:1f:9b:83:
ab:e8:07:be:92:47:b7:0d:7c:f9:ae:3a:4a:11:85:
b5:00:7e:1e:08:e9:54:6c:55:19:23:cc:11:0e:ef:
59:b2:e2:b5:ab:17:f2:d2:4d:5c:24:e2:3b:c6:a5:
4a:69:aa:80:de:ab:f8:c0:09:b2:c9:2d:ff:d5:ea:
eb:2f:87:bc:35:53:3b:1e:2a:2d:61:89:4b:28:f5:
1d:41:44:14:0c:ad:b9:5f:b5:c2:70:a0:dd:18:8d:
6f:e3:66:c4:7d:75:b4:a5:8c:e1:b0:63:9b:9d:63:
c0:48:1d:bb:aa:da:94:2d:21:38:98:30:2a:20:18:
f6:16:b0:b5:40:2d:02:0b:be:98:7b:d1:58:35:68:
98:3f:42:e3:f3:1f:01:5c:84:1d:17:cd:fa:63:44:
a5:a3:e8:a9:ea:3b:5e:ab:10:5d:30:6b:c2:36:41:
c0:b5:ec:98:68:02:36:36:c9:aa:1c:73:a6:d5:69:
39:75:38:4b:ec:d2:65:f8:47:7b:f7:fb:af:b3:23:
43:2e:39:15:44:21:33:57:f2:07:49:24:9e:53:59:
ac:b1:7b:a5:5c:00:48:25:c4:94:85:45:72:c4:99:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:1F:C7:EB:F1:48:82:83:44:E5:E0:45:13:8A:95:99:AB:23:A1
X509v3 Authority Key Identifier:
keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:b8:27:71:f0:8f:41:59:6f:fe:dd:89:6c:25:ee:7d:bb:
c1:66:cf:4a:fd:fe:b7:60:57:86:4f:20:7d:7b:e9:29:7d:99:
bc:6b:1d:e6:a4:93:d0:12:ee:5f:42:60:f2:0a:58:ce:b1:5b:
6e:c8:8b:dc:c0:0e:1c:ee:55:7f:f5:95:de:dc:9e:3c:4f:86:
6d:61:aa:3c:18:47:ed:e1:c7:da:9a:a4:38:03:c6:8d:91:b0:
8d:b1:65:27:b7:17:ed:b6:18:c0:36:01:6a:b1:1b:dd:bf:9b:
8a:b8:09:6e:8d:e1:ef:4a:ce:a5:85:ec:93:10:3b:2b:ac:ff:
5a:c8:90:42:62:de:00:5c:7f:a5:ae:20:e1:d9:6f:39:d4:42:
1c:78:c7:82:45:94:8b:76:03:9b:7b:cc:84:28:2c:58:28:c6:
a0:d4:21:92:04:3e:6b:94:1c:5c:18:c3:2c:a4:ca:ba:b8:0d:
b1:c6:de:fd:e5:72:d3:c3:f5:b2:38:56:30:d2:68:20:c0:6f:
34:24:38:16:ab:9d:d9:c8:d6:9f:b7:3b:29:8a:7b:02:35:fd:
ef:b8:00:7d:b1:da:c6:e2:06:40:e2:8e:67:13:59:bf:3d:b2:
ae:5b:ba:f0:dd:3e:ad:5c:5a:9d:a2:26:4c:14:0e:8c:5b:87:
8a:88:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:14 2025 by rpki-client