Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: 1prIXxrDd/+ix9ffRsjpNOL25jplIFLdrIm7fINXcoQ=
Subject key identifier: BA:91:5F:0A:A1:19:36:59:C5:A1:43:2F:EC:12:B8:6F:23:CA:EE:49
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019A725C7D70F7E957E74DC9A75934FE8E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 11B1
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: s4GsLUviM8bXQ1WIH8OhXf/C+MK1IEXbJvYzJQzCtnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:70:f7:e9:57:e7:4d:c9:a7:59:34:fe:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=ba915f0aa1193659c5a1432fec12b86f23caee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:5f:b5:79:00:2f:20:a7:38:fe:34:97:c0:
a1:70:43:c6:59:e3:ee:56:7b:e8:83:1e:ae:a6:5c:
87:6a:82:78:15:92:c4:f9:30:c2:07:58:e5:ff:be:
27:75:0b:e2:60:8a:91:7f:8f:40:07:58:7d:b0:ec:
e5:f7:ae:1c:81:25:dd:65:f2:d6:21:87:e9:6f:a0:
72:57:0d:fa:d9:a9:61:5b:ab:4a:fc:cf:6e:14:45:
23:2c:23:cd:a8:83:26:89:21:44:37:bf:ea:72:bb:
a3:f6:ff:a4:fb:92:a2:e4:36:3d:9f:34:16:46:11:
19:92:42:44:15:d0:b9:59:6b:37:d8:ff:35:49:a3:
34:6d:1c:31:1b:22:33:0f:e0:19:cf:5f:71:82:a9:
0a:fa:2b:d9:ed:15:44:a4:db:be:2d:a4:d1:54:9e:
f2:60:eb:dc:7e:4b:16:ce:de:2d:e4:c3:ac:e2:56:
18:09:2b:de:86:b2:04:c4:25:fc:06:cb:82:04:69:
be:3c:e3:98:7d:89:fc:16:30:e9:5e:69:e2:52:ba:
f9:3d:de:26:02:25:26:2c:72:0e:db:41:57:31:85:
f6:25:a0:b4:91:e4:56:2e:3d:bc:69:87:cd:bc:44:
82:15:b7:04:15:c2:ea:e2:79:bb:15:ba:5b:e0:eb:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:5F:0A:A1:19:36:59:C5:A1:43:2F:EC:12:B8:6F:23:CA:EE:49
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:12:1f:c5:17:e2:71:62:cd:73:94:5c:59:fc:eb:0e:18:
74:ba:90:77:1d:77:84:fd:b1:e0:78:9a:9f:56:77:1d:cf:f3:
9f:42:3f:20:5b:ea:5e:0f:0f:30:06:30:88:d4:01:bc:18:1a:
a6:96:94:3a:7b:bb:09:99:c7:55:5c:6c:06:48:60:9a:4a:ff:
e1:09:b1:25:a7:32:4b:a1:62:9c:1e:97:7f:b6:f7:68:25:d7:
fc:9c:14:3a:50:9b:21:12:77:8d:3c:44:c3:9c:f5:ac:fd:99:
76:4f:f4:3e:ea:8d:0f:43:9b:32:49:c3:bd:66:67:60:f9:74:
03:34:0f:7c:35:7f:1a:a9:db:ff:dc:7b:e3:6d:fd:5e:65:13:
29:2a:e0:2f:46:85:84:40:7c:f3:db:16:34:f4:17:c5:2f:04:
7c:10:14:e4:4b:ec:a9:cb:cd:e6:b7:aa:c4:cc:f3:3b:cc:fb:
db:00:27:55:6b:18:d8:e3:b2:de:86:d1:e1:a0:94:eb:ac:6a:
ea:2a:df:9f:0f:89:56:21:03:b0:46:fe:23:76:1d:b5:12:55:
f4:b3:bf:48:bd:d1:30:f8:06:6d:db:88:47:ad:d9:ab:dc:f6:
83:f5:ae:3f:f1:0e:c9:07:a5:ea:e5:59:1c:92:c5:74:10:61:
46:5b:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client