Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: h+ceKgvSFR9i82+GKcYgOBgef70A/4tOyNh3qggpc2A=
Subject key identifier: 49:D8:35:45:65:FC:BA:06:03:40:23:AD:01:6B:34:1B:BA:A4:3D:54
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019A7112A7046CB7D581A79B9F55EBC2E78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: FEq9fjxZ6P48j+DL2KdH4Uxml14E7HqN8IyqinimWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a7:04:6c:b7:d5:81:a7:9b:9f:55:eb:c2:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=49d8354565fcba06034023ad016b341bbaa43d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:0e:56:e5:7e:79:36:1a:fe:f2:5c:fa:73:
37:65:1a:85:c3:d2:c6:4e:41:a5:77:f9:80:25:9a:
cb:69:20:17:ce:04:bb:e2:06:e9:84:54:eb:14:e3:
b8:b3:30:b7:e3:ce:91:e2:1a:33:c3:e6:6f:b8:5c:
18:11:7e:a4:83:c5:04:71:3a:3b:05:c6:24:9e:f0:
15:5f:60:7a:a1:e4:06:58:18:84:5e:08:3f:73:7b:
9c:ef:8c:8f:d2:54:b9:86:da:28:2b:f7:35:38:9e:
32:82:7c:ad:77:fb:4b:8d:96:57:9b:57:2b:82:cb:
8a:41:72:bc:be:5b:98:86:dd:a0:27:96:00:20:5e:
ac:e1:6d:c5:d9:8b:18:da:b6:24:21:69:cf:ab:49:
d4:c2:92:95:84:67:e4:cf:c0:89:86:af:68:e5:79:
9e:47:d1:76:1e:e4:e4:c8:c5:24:10:85:0c:03:cf:
38:3e:7c:e7:b7:d3:01:3d:7d:3e:4d:bd:0d:c2:43:
e3:46:bf:43:ac:2e:c6:45:13:bb:56:70:a2:71:b2:
9c:f3:6e:58:7d:5b:24:a5:2f:49:19:fa:6d:79:38:
7d:e9:12:16:d8:2d:d3:f3:17:77:5e:ff:c2:a9:7e:
41:4f:9b:5b:43:e7:3f:b1:f9:d3:9c:37:2d:e5:be:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:35:45:65:FC:BA:06:03:40:23:AD:01:6B:34:1B:BA:A4:3D:54
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:25:e7:dc:0d:56:30:81:bb:56:5f:09:a5:34:cc:de:ec:
11:20:0d:bf:7d:5f:f6:c2:55:71:89:fd:f2:de:06:47:44:b7:
cf:58:f6:f3:7c:da:c9:b5:bf:f9:15:44:6b:ea:ed:ff:2c:37:
f1:b3:88:8e:e9:98:f4:01:6a:4d:39:3b:ff:91:12:13:8c:cb:
70:ca:fe:48:dd:37:15:f0:c5:26:0f:e0:f7:08:e6:22:57:3f:
f6:34:1c:8f:cc:34:7d:e6:34:6e:8c:18:d9:58:02:2f:89:94:
48:83:59:fe:eb:68:90:a1:e7:0b:b3:c9:f8:08:9e:a7:10:b3:
37:f4:53:ae:10:4a:f0:7a:ac:35:12:fd:cb:7f:3e:e4:1b:00:
a0:e9:5d:fa:ae:63:b8:c0:22:fb:e5:6e:6c:52:3d:8c:31:9d:
e5:8b:93:25:b4:ea:0f:50:8b:09:4c:dd:c9:bd:77:9a:ec:c0:
05:79:99:d2:5c:8b:ab:1e:da:93:5d:f3:ad:4c:7b:74:35:85:
8c:f1:27:9c:b7:33:a2:82:fb:d0:59:17:23:49:61:98:4a:f7:
6e:27:7a:a4:7a:bb:ee:74:e0:bc:8b:6b:e5:9a:50:f5:3e:59:
fe:1d:f3:fe:53:f2:00:55:93:02:06:f2:e6:6e:84:50:a6:9c:
7b:cd:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:20 2025 by rpki-client