Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File: VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier: 2t2PP8MJ5UMHRbumh8UkuLnnHzhKV/NKrJiYTxJ+OOw=
Subject key identifier: E1:1C:88:FC:90:2F:24:29:4B:7F:DC:83:20:70:67:86:30:10:4D:B5
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 019A71B9487B5F15E5E5ADB57A7B89F62B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: 5ViHo8CP-gF060JRbv2sDnYVvwI.roa (hash: QuO6jCw1G7bEtuq5gtmVrfr4TZNPSxo88gcCHtVd/jE=)
2: 8fof93hByfwq17Ckt-3keL0U8qE.roa (hash: fPV8OZM9BBwYkvL7Bz4KdU4owCtM7tBBVj0Rie52yyQ=)
3: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: YUDraHBlZgCTPgAw+BOY2HdK878ne6VziXqjyhplGbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:48:7b:5f:15:e5:e5:ad:b5:7a:7b:89:f6:2b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=e11c88fc902f24294b7fdc832070678630104db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:2e:67:60:cd:ca:1b:11:5b:d9:48:77:db:
32:67:af:f4:85:1c:09:2a:51:d2:62:d4:6e:ee:28:
aa:92:01:b1:0d:5a:d6:28:f6:cd:e0:33:7c:fb:93:
47:e1:d4:00:6d:f7:17:2b:a0:1e:52:86:18:1f:04:
3d:4b:d2:b5:3e:fd:c5:51:ed:52:5c:8c:0f:59:a2:
29:22:f0:7f:4b:c8:04:61:7b:19:d2:4a:01:1f:dd:
45:67:2b:ba:85:e0:c7:49:cf:08:8d:87:6c:91:2e:
41:66:75:12:18:a2:57:5e:32:79:23:63:1d:b9:fe:
fa:4a:14:2f:61:a8:80:29:28:46:6b:f0:ff:97:ff:
e5:e9:f1:ce:66:01:e8:a7:17:2a:f4:c6:58:57:36:
20:d9:43:ad:b1:fb:73:80:c9:4a:e6:f6:39:b9:02:
f5:70:24:3f:2e:7a:b7:09:3e:e7:27:d2:3a:bb:59:
00:bb:94:7f:38:68:f9:82:9a:1e:46:a0:ab:95:f0:
da:ac:cc:f1:ff:f2:71:b3:23:eb:88:d2:52:02:15:
2d:32:3d:3d:10:8d:68:c7:28:af:18:04:b0:0c:d4:
49:89:6e:d2:fe:cb:37:f0:85:99:fc:f9:50:d9:d8:
45:8d:f2:7e:ae:05:cb:59:8a:aa:d7:e3:fc:d0:fc:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:88:FC:90:2F:24:29:4B:7F:DC:83:20:70:67:86:30:10:4D:B5
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:36:9c:4e:46:b1:37:23:24:e0:7e:ad:db:59:e8:55:97:60:
77:e2:8e:04:b2:68:5b:72:8f:96:91:0c:8a:30:66:eb:68:52:
a2:6c:01:39:c9:e9:56:f8:0b:72:fd:8f:7a:0a:bb:68:bb:4c:
8e:c5:5f:85:91:5a:68:33:ef:24:9f:c5:7b:c4:61:27:62:69:
3f:4a:cb:ed:8e:fa:e1:a1:fb:f6:2f:0b:a2:97:16:53:52:3c:
b7:68:ef:c7:ad:02:b0:df:19:3d:7a:6f:9c:86:93:39:6f:cd:
ac:73:c6:c2:bc:20:d0:85:ce:79:33:25:13:4c:0a:67:5f:2c:
ed:a6:08:b6:ac:e0:96:10:29:0d:8b:6e:32:51:03:5d:41:51:
0e:31:f5:c2:b3:43:63:4b:9b:a8:52:8e:1e:b5:d5:31:57:b8:
da:d2:d4:4e:96:19:a4:43:c2:0a:59:a4:e5:7d:9c:e1:63:06:
41:7c:24:39:41:91:9b:82:65:9d:4e:b2:9f:2c:72:66:87:33:
3d:0d:6e:07:ba:5a:16:1c:a1:64:a7:34:d8:66:bb:3d:f6:19:
4b:5a:17:37:bf:44:09:bf:16:bf:e6:8a:a2:55:ab:67:59:bc:
e2:ac:c3:ae:65:2f:f8:a5:39:61:4a:57:04:e6:6a:92:5e:df:
d7:33:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client