Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: N43Ub9pWc+jBH+5aef3oZbW5O7BHX+qGQZerHuPMUC4=
Subject key identifier: C7:B3:56:3C:8C:8F:06:BD:3F:3F:AA:70:F8:BA:DC:AA:C9:71:E1:DC
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 019A71B86BAE7C1D61DA0FDC8B936055EED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 144A
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: JXVuLUpQ89YmCbiayxs4EF+ST9FOOvMsliqIDy01GFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6b:ae:7c:1d:61:da:0f:dc:8b:93:60:55:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=c7b3563c8c8f06bd3f3faa70f8badcaac971e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:00:cc:80:ff:f6:2e:b9:2b:f8:cb:e8:d9:
42:1e:1f:4d:dd:0a:36:1f:07:d1:eb:14:4b:44:08:
a1:71:65:65:e1:11:21:a4:1a:e8:7d:6c:43:e4:fc:
a1:26:44:21:86:78:6e:01:e8:3a:e3:a7:2f:2e:f0:
49:0d:29:41:a4:17:63:26:0a:38:4f:f8:68:ae:77:
d4:e1:5c:61:39:dc:54:63:61:ce:e0:92:13:7e:ae:
7b:58:6c:bc:16:b4:f4:c0:c6:64:48:18:bf:cd:18:
ad:7b:b0:74:28:48:7e:ea:ef:22:9b:30:ff:c8:b5:
06:86:8c:ca:9e:81:a7:d4:ef:c4:d6:1b:58:c5:c7:
57:d5:e9:6c:3c:fe:72:b4:24:54:e5:ca:fc:82:a5:
f8:ae:41:93:51:ac:ea:6d:b1:fb:f0:a8:87:bb:d8:
f4:37:a8:35:d9:37:cc:f1:3d:d1:36:72:14:61:f7:
77:aa:d1:da:c5:58:1b:ab:96:ed:29:06:64:38:fe:
e2:1f:c2:e5:34:71:90:a9:63:b2:96:0c:c6:03:af:
7e:57:a0:87:58:eb:8e:18:38:ce:ee:61:62:82:82:
ab:fb:49:bb:5b:5c:36:c3:f4:d9:36:52:af:2e:db:
19:5f:c6:55:0d:8c:ed:66:1a:45:a8:22:24:83:cb:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:56:3C:8C:8F:06:BD:3F:3F:AA:70:F8:BA:DC:AA:C9:71:E1:DC
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:13:00:a1:11:05:64:7e:76:df:14:96:b9:60:08:6a:5b:
9b:67:ef:59:4b:88:4e:19:5c:4e:f6:3a:2c:f2:2d:af:ee:62:
05:68:b5:b4:97:1e:50:d6:17:ec:4e:c9:63:2a:50:86:8c:33:
7a:da:25:35:41:c5:fe:50:59:df:17:7c:e3:73:d4:c2:93:18:
66:1d:97:5b:ce:91:08:93:7a:5e:43:a9:55:49:99:57:d7:1f:
c3:49:14:1e:03:aa:ad:be:c2:c9:95:f6:84:1e:df:d3:5b:e3:
72:2e:04:35:fa:2a:ee:43:27:e6:5d:02:31:01:a0:75:ea:82:
7c:04:1b:0a:b9:a7:65:c8:c1:f0:ca:a0:1b:73:83:cb:b4:95:
ad:56:24:3d:17:a8:14:0d:95:d6:d0:8c:39:be:77:09:06:3d:
16:98:f2:a1:8a:93:15:61:1b:a4:1e:34:e0:65:fd:4c:74:42:
f8:14:8a:b7:b3:e3:e0:67:cf:e6:2e:79:af:ca:25:6b:ee:3e:
e7:de:86:c5:3e:fd:ae:7c:87:a3:71:3c:03:73:ea:bf:10:08:
7d:20:d2:7e:29:0e:6a:6d:e1:ee:63:e9:07:d0:19:5e:39:da:
59:0f:e8:aa:31:34:af:eb:26:d1:b1:91:60:ac:11:5e:fd:6e:
ae:44:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:53 2025 by rpki-client