Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier: l5Mhu5Dq36qeBzcoW/TVMUFY088CpXPk0/Bx/7PXhCQ=
Subject key identifier: DD:B0:35:2B:9C:91:97:BA:51:70:0A:3E:A9:09:52:62:1D:54:BF:CE
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 019A72261DA270EE4F2A32D28FCAA1C2A7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number: 018A
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: Oil4wYcdN60LsXkkr/mMksJUvgNesiKSSG8Un2bcvLU=)
2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1d:a2:70:ee:4f:2a:32:d2:8f:ca:a1:c2:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=ddb0352b9c9197ba51700a3ea90952621d54bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:6d:16:68:51:1c:04:7f:63:b3:ae:03:5c:
cd:09:c2:c8:e1:f1:44:98:c1:8e:9c:a4:22:6a:5d:
fb:4c:bf:6d:dd:37:19:91:fe:9e:ab:53:e4:24:85:
56:5e:d8:a6:8e:57:d3:8a:a8:8e:33:2c:84:35:8a:
d8:b1:4c:e8:c5:74:bf:ab:88:f6:66:6a:75:b6:32:
1f:3e:b3:e6:40:a1:b5:9d:16:56:93:8c:bf:41:59:
b2:01:bc:1d:55:bb:2e:5a:45:92:03:52:7a:53:a0:
85:bb:92:48:a5:99:fc:04:b1:0a:d9:96:d2:59:4f:
a6:07:9b:49:ab:93:ff:09:21:bc:5e:32:9a:9c:32:
69:9a:f0:ba:36:15:2c:56:34:7b:d1:dc:1c:c0:3a:
08:78:03:8d:b8:27:7c:c6:30:d6:ae:69:16:45:89:
f1:d9:ce:97:49:98:87:86:e6:cd:21:77:69:b2:57:
44:0f:0c:36:ab:31:58:a2:a7:79:df:ac:c1:70:0f:
cf:23:57:13:d8:2b:1e:c9:91:e6:bb:98:ca:db:9f:
c7:19:ae:f7:e5:c7:e5:b9:35:e9:70:8a:ac:b0:06:
28:5e:b4:9c:d8:77:ec:e6:11:ec:26:e7:28:dc:4c:
d1:5a:2d:6e:4b:56:8d:36:39:b8:6e:ad:56:1d:2c:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:35:2B:9C:91:97:BA:51:70:0A:3E:A9:09:52:62:1D:54:BF:CE
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:7e:1f:ac:7d:6a:5a:6c:45:e3:c1:8d:4f:92:c5:64:06:
31:fe:60:6d:20:3e:e1:90:57:86:57:c1:e9:76:76:d7:1e:53:
9a:0b:69:ad:6d:49:e6:fd:0d:a5:21:ac:68:02:d6:b5:7c:9e:
13:b9:fa:1a:74:67:3e:a4:13:2f:6e:21:bd:e7:4d:fb:6e:47:
10:ba:70:62:63:6b:a6:85:3d:e1:76:bd:55:67:6a:79:5f:3a:
09:53:fa:e6:96:80:56:17:45:af:76:99:1c:fd:6a:49:d6:7b:
f6:74:0b:17:2f:8e:70:e6:e8:1d:21:85:9e:13:e0:bb:ce:58:
f9:04:70:a3:93:7c:d8:38:d9:f9:60:7d:7f:f2:41:9c:4c:3a:
ec:93:80:6c:2a:31:85:76:a3:a7:dd:18:9e:09:c3:b9:02:17:
37:1e:88:53:59:ec:5b:57:b4:71:ce:72:94:34:a2:66:13:fa:
e7:b4:64:69:2f:04:0b:54:79:b4:f0:fd:48:f0:6b:c7:66:5d:
66:56:26:6e:70:88:3f:71:1d:0e:bf:47:f3:41:25:40:23:f4:
b5:89:b9:f4:3e:1b:aa:e7:bf:20:da:5c:96:c1:ff:90:a0:f6:
34:7d:68:f4:ce:b6:7e:50:5a:06:a5:28:e7:6f:fe:96:e4:ae:
18:92:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:49 2025 by rpki-client