Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File: Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier: 4aH6VQvHAcsSNWv3Yqyjtgl8Ma9+ukT5cQDiT4S7OgQ=
Subject key identifier: E8:9A:63:A4:6C:5D:16:8D:37:D9:1B:AB:80:BF:7B:86:92:CA:BA:1D
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial: 019A71EE9DB6F78AF3141462B46684D452F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number: 1644
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: FJqfI4dWwYP63CycgnZqYo6gLbA/u/DdVpNFI9tTwXA=)
2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9d:b6:f7:8a:f3:14:14:62:b4:66:84:d4:52:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=e89a63a46c5d168d37d91bab80bf7b8692caba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:15:52:04:a0:9e:ea:a5:3f:ba:f4:ed:92:
e4:ca:20:20:5a:a7:52:80:0f:9f:37:9e:8f:59:48:
02:ea:87:d6:37:2c:6c:94:3b:95:37:26:f1:6c:98:
ac:bc:ee:03:7f:10:8e:67:5f:a5:44:d6:35:a3:2a:
d6:0a:3b:e4:a8:6b:e0:5f:cb:5d:93:97:d6:33:09:
05:65:7a:11:75:95:50:6b:cf:92:10:e0:00:9f:ae:
b6:a8:c3:07:26:5f:4c:ab:86:c8:0d:da:32:56:0e:
cc:be:ce:f2:6a:70:ac:10:84:b2:be:ac:90:60:12:
ad:5e:21:29:c4:33:0c:5c:f2:e8:4c:bd:64:42:96:
f8:7e:02:3a:eb:eb:a2:82:6a:2f:19:7f:a6:ba:6e:
75:76:21:d0:5b:73:4c:f1:52:47:4f:27:9d:77:8d:
8d:7c:58:80:0f:b0:5c:3d:77:df:83:c3:9f:1f:0d:
d8:d4:29:41:3d:09:7b:7c:16:03:9d:17:f2:b2:db:
e8:69:f7:ca:3b:ab:0f:4c:53:12:3d:78:9a:e4:b3:
39:fe:88:cd:eb:3b:ac:50:b4:66:6e:cc:d7:8d:cd:
4c:06:9c:6c:c5:b0:88:8a:94:4e:03:af:ca:65:0a:
01:db:cf:0f:85:67:83:25:91:9c:52:e6:8a:30:48:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:63:A4:6C:5D:16:8D:37:D9:1B:AB:80:BF:7B:86:92:CA:BA:1D
X509v3 Authority Key Identifier:
keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:56:3d:34:ae:ac:a8:01:3d:b9:b8:12:76:36:e4:f2:c3:
49:ba:de:1f:b3:ab:17:13:a6:b6:e4:8a:45:3c:fd:7d:02:88:
1a:82:0b:7b:3a:5f:3d:ba:16:a5:e7:e5:ac:4c:39:6b:59:71:
86:e0:63:a5:57:1a:5d:69:88:3e:13:51:b4:30:e6:83:31:25:
2b:bf:f2:cf:f1:b3:85:20:e5:44:13:0b:44:57:3a:e1:41:db:
5b:2a:81:68:38:08:df:1a:87:09:30:0b:69:bc:d6:0a:32:c6:
33:4b:bc:cc:25:c4:d1:a6:d1:cb:4d:a2:dc:09:99:c0:73:68:
93:04:b4:9f:92:a2:f9:bf:ea:4f:6c:ef:dd:9b:9e:7c:e4:a1:
c1:f5:76:99:cd:1b:9a:a8:51:11:6b:88:2a:a2:5e:fa:d8:ed:
80:5b:64:57:b6:58:6d:83:29:17:a1:a6:2d:ef:b8:a1:14:54:
5b:7f:d3:90:eb:28:a7:1f:44:fb:00:3f:20:d6:e9:e6:a6:9a:
47:55:ad:e7:24:ca:13:67:13:42:a0:dc:91:2b:f2:2c:7e:5a:
6c:47:22:57:c8:bc:71:b4:40:53:63:c1:bb:81:89:15:5e:a2:
47:53:a9:2a:f9:24:20:a4:e0:66:60:c3:fa:51:76:7a:3a:cd:
fa:34:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:39 2025 by rpki-client