Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: SCDmQ8l5/g3i4jrhZR/T/L9UsiNapXbEkFjYggKQwTY=
Subject key identifier: 50:9A:57:29:E3:9E:2B:49:34:ED:65:52:41:73:EF:0F:C0:16:1A:72
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019A71B78E3F6B717F19E41FE7E3D650F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0EB2
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: dj4sjjRYD13Pv0Yb1U8cgdJjuMDnUXMSyyIb+DYL6HA=)
2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:3f:6b:71:7f:19:e4:1f:e7:e3:d6:50:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=509a5729e39e2b4934ed65524173ef0fc0161a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:eb:9e:36:3b:16:fd:c0:a2:0d:0f:f1:ed:
2e:83:31:d5:dc:fa:0a:c2:ed:e7:ba:c5:26:81:e2:
2d:3d:b6:be:4b:49:2a:ae:0d:f3:df:f5:81:d4:52:
c0:5f:fe:2c:61:47:54:50:df:12:37:99:14:1c:15:
74:a0:68:ba:af:61:50:df:c5:db:45:ae:75:4d:bd:
80:bb:44:21:70:e8:aa:be:40:61:0e:26:c5:69:31:
51:b0:be:fa:fe:05:19:5c:28:17:54:12:ea:91:76:
34:9a:f7:ef:66:27:3d:9c:7c:c4:a2:1f:88:73:c6:
78:2f:ce:02:d5:07:c5:89:af:05:b8:c6:3f:6f:ff:
52:8a:81:89:83:41:6b:3b:dd:a0:6d:b1:80:4b:0a:
c6:54:14:7a:f5:d1:d1:ef:38:ce:e2:b7:d8:9a:fb:
f0:d3:e8:2b:2f:cf:67:87:c8:e6:2f:6c:29:05:60:
ee:73:4c:40:77:ba:ad:0f:8d:bd:97:c5:00:8b:23:
3c:78:97:93:2d:e6:bc:13:f2:56:1e:d3:2a:3c:c0:
9d:ee:7f:f3:3c:93:0a:f3:d1:77:6f:ae:cc:00:3d:
24:db:4f:a8:3d:51:f9:95:86:e9:86:9a:5a:cd:2c:
52:82:9e:43:f5:f7:7a:a7:60:3e:29:7b:91:5f:06:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:57:29:E3:9E:2B:49:34:ED:65:52:41:73:EF:0F:C0:16:1A:72
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:18:9d:16:30:c1:58:71:00:4f:06:45:b5:33:92:4a:3c:d5:
d5:5e:72:a7:f5:bb:22:68:4d:a8:3e:1d:35:ea:bc:71:34:f1:
b2:ef:e1:aa:f5:0c:1d:85:78:24:f9:6a:0c:33:e6:9e:42:e7:
12:cc:de:57:a4:bb:f6:b8:f4:cc:4d:65:44:e7:1e:e3:3b:30:
a5:70:2e:a4:39:c7:c4:37:cb:07:fb:0c:0e:20:0c:41:8d:44:
b4:2b:e1:c9:76:92:ed:4a:a8:98:5e:55:21:f9:cd:be:de:67:
4d:c0:0b:80:ea:1b:5e:c9:86:ac:1a:65:00:bc:ab:0e:2c:c0:
15:90:da:84:72:cd:15:3e:d1:42:a5:e9:28:2a:6b:52:e2:b8:
98:d9:0d:5e:27:31:aa:59:8b:30:06:f1:4c:91:87:08:a5:ce:
f9:f4:f4:05:74:7d:ac:4b:9e:e0:27:12:93:34:24:97:4f:7f:
67:6d:92:b4:5a:cd:39:8d:61:6a:f4:64:b0:50:c5:12:1c:45:
fc:98:f8:1c:20:87:c8:60:9e:9e:22:03:59:f3:c9:96:05:e7:
8a:11:db:88:5d:19:20:83:92:ce:7c:58:25:5b:23:e9:47:c7:
6e:ec:6e:e1:6a:be:50:5e:ff:97:d3:77:3f:1e:00:c6:14:cb:
be:55:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:13 2025 by rpki-client