Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
File: vlSo6uJa4PaLNFLEaF2UOefRxf0.mft (raw, json)
Hash identifier: wEZHx/U5CSuanDnAf4EuLgLotONByGow/Tk0HCdfw68=
Subject key identifier: 6F:C7:62:E1:4D:6E:3E:C9:C3:62:C7:94:4B:7B:37:DE:BF:44:64:37
Authority key identifier: BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD
Certificate issuer: /CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
Certificate serial: 019A7180970B795C71DF1A363E9109962840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
Manifest number: 05
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: akY5-4-g2obAzmTP9gII_aizPf4.roa (hash: KzVeM7VQFmS8KaLIcAh5ltjwswioSvZ+o5zTBX1hlx0=)
2: vlSo6uJa4PaLNFLEaF2UOefRxf0.crl (hash: RGF+MIqHjRoqRrcmNu4OhNUMSyMHlne/XvRifdM4Zgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:97:0b:79:5c:71:df:1a:36:3e:91:09:96:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=6fc762e14d6e3ec9c362c7944b7b37debf446437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:6b:92:8c:4a:f4:18:55:52:5e:64:39:24:
4b:56:11:0d:cb:3f:94:d1:f6:bb:6c:9a:05:d6:2f:
de:57:26:66:91:04:f3:07:b2:ad:fd:6c:69:5c:a3:
4b:2e:12:ac:61:a4:e0:71:20:02:fb:13:49:70:6f:
d1:e1:03:51:dd:13:dd:a0:93:93:2a:79:cc:fd:29:
db:e8:ac:3d:34:48:bc:39:c0:67:cb:83:72:2e:cc:
75:cf:b2:d8:e9:f5:48:1b:bc:9b:bf:1e:23:45:54:
22:70:81:4a:23:be:69:e1:fd:28:c2:fa:4a:9e:67:
0b:65:c5:e2:3b:96:41:c2:08:aa:74:46:f6:d3:32:
24:97:99:08:4a:d0:ba:72:94:8e:db:d2:c0:2d:1e:
8c:df:28:66:d8:90:6f:73:7f:9b:01:b3:1b:78:e9:
2d:f1:a7:34:9a:25:2d:84:c9:f4:28:e3:a6:20:95:
44:e8:49:73:e3:d9:c4:ed:6f:0c:87:93:ff:c3:8e:
bd:96:32:18:f8:90:37:d9:ce:b7:60:ff:5b:d3:ec:
e3:b4:fb:fa:ad:b8:1c:41:11:4c:e8:68:49:7e:89:
d0:00:08:d5:42:d7:b4:54:6f:3d:a8:73:d3:9f:bc:
63:b9:7a:88:ca:7b:62:db:07:54:21:8b:9e:0e:18:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:62:E1:4D:6E:3E:C9:C3:62:C7:94:4B:7B:37:DE:BF:44:64:37
X509v3 Authority Key Identifier:
keyid:BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:ee:5c:ee:54:6e:bb:e8:f8:d1:3c:25:3e:93:b4:e1:b7:
3f:45:7f:93:f2:12:be:a1:16:75:b1:91:81:8c:e0:7c:7f:6a:
25:22:ff:8e:7a:e9:6a:ec:c3:ea:56:d0:ce:dd:5e:88:87:ec:
13:b9:ec:41:0c:04:f8:6a:59:72:a9:97:9c:f9:00:bd:83:41:
7a:34:5b:04:69:bd:5a:1f:1b:46:00:eb:f5:be:ae:d3:99:2d:
63:10:da:3c:40:e7:70:29:93:9c:9f:58:80:5c:32:86:d4:1b:
75:86:eb:01:57:4b:58:1d:1e:b6:51:a6:e5:fd:77:d2:49:cc:
1e:c9:46:52:3b:07:04:eb:cd:f7:b1:94:80:e6:bf:60:81:ed:
c0:b6:08:09:f6:ce:7f:c5:0c:14:3a:27:89:26:2b:49:0a:65:
4d:8d:6e:d2:dd:ea:17:04:e6:62:38:2b:a2:e8:7c:1f:2c:3c:
89:cb:45:ab:43:82:5f:1b:61:2e:54:7e:70:26:b7:5f:7d:31:
da:8e:8e:f3:a8:b2:56:56:18:34:be:05:d2:7b:9f:f5:be:ca:
04:57:86:95:7b:5b:47:16:6e:68:97:4d:ac:2c:2e:bb:b9:84:
57:8c:cc:77:f8:db:e6:e2:d4:0f:a0:f5:a2:d9:79:c4:45:8f:
83:02:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:31 2025 by rpki-client