Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: YBV8sqIo5Cc1m5ezCILvOQgoVos9tGJqzK69vVmnaNw=
Subject key identifier: DE:B5:BE:5B:22:63:47:8C:70:1C:41:39:68:0D:34:DB:59:DA:7B:E9
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 019A714A04488C1D09424D5A07170E6373C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 021C
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: uLF7mWRc0kQJ5r+BcfJz4w6QBo5zQuZmt9rjoeaYyl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:04:48:8c:1d:09:42:4d:5a:07:17:0e:63:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=deb5be5b2263478c701c4139680d34db59da7be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:2c:6a:e9:e2:32:c0:e0:d7:a3:be:48:56:
26:95:2a:0f:25:60:6a:8e:93:01:27:54:86:b5:b0:
cc:fd:1d:36:43:e4:30:c2:41:44:0d:d5:40:ff:d7:
7b:c3:fa:97:a2:95:62:a7:e4:92:85:60:79:6d:84:
0c:62:ec:96:7f:4e:29:71:04:8c:46:42:0d:48:72:
89:c6:ea:73:48:98:2a:48:11:73:34:ee:a9:13:c5:
46:cf:77:13:19:e3:54:f6:b2:ca:4b:5a:73:14:4e:
d9:66:b5:8d:af:f0:16:36:b3:8a:c0:1a:0d:b3:21:
c9:67:97:eb:74:f4:c5:0d:62:0e:2b:1b:4a:38:0f:
72:bd:3b:03:48:e2:d8:40:41:3e:a7:65:a6:48:22:
fd:87:2d:2f:3c:12:94:4f:b6:6b:86:94:c0:76:15:
0d:61:60:34:84:cf:6f:b7:8d:09:b7:03:18:b4:83:
fa:8e:6e:4a:81:1e:da:58:01:e6:87:05:43:d4:4c:
38:b8:44:d1:e6:d3:ee:42:37:c1:f8:9c:d8:2b:5a:
56:30:2b:14:5e:4f:93:23:3e:8e:3b:fb:be:57:67:
e7:93:2c:df:da:4d:49:93:b7:5f:a8:79:eb:a6:73:
c9:fb:b8:6c:36:6c:85:8c:44:8b:41:9d:74:c0:39:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:BE:5B:22:63:47:8C:70:1C:41:39:68:0D:34:DB:59:DA:7B:E9
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7a:82:e8:5e:c7:f4:68:66:96:0b:b5:e8:01:87:50:16:0b:
1c:6c:86:77:d9:bd:48:be:f8:2f:26:a7:e1:2c:b4:80:75:b3:
50:96:8d:cc:c3:4d:a5:b3:4f:67:bc:b0:46:72:6e:9f:ab:17:
12:cf:09:44:a5:ed:8d:5d:ac:90:db:5b:cf:5e:5a:31:8e:0f:
7a:24:6f:ff:59:5d:a5:5d:44:69:b0:e6:d4:01:e8:d2:2c:85:
86:6d:f8:9f:d6:74:81:2e:14:f3:a4:72:1b:bf:57:03:43:bf:
31:7b:a9:39:44:c4:06:13:47:ef:b6:67:03:e4:a8:dc:27:a2:
38:8a:ec:97:6f:f6:c8:52:64:3b:c5:f4:5b:76:6c:e4:e7:ae:
33:e1:53:2d:2a:97:08:5f:d4:2c:1e:38:a2:7a:cc:6b:1a:82:
c8:27:ec:fb:59:af:37:55:e4:51:4b:d1:53:fe:4d:00:15:5b:
2c:bc:a2:49:20:e9:ff:3f:7a:7e:80:f8:8a:94:e0:ac:2a:9d:
11:d4:02:0d:68:4f:ce:c6:ad:53:3a:4b:41:18:22:23:a2:39:
36:f8:2b:fd:53:6c:6b:6c:a0:4a:9c:12:fe:35:36:d3:91:76:
41:fa:9b:29:eb:28:a0:32:df:cd:ba:5e:4b:8d:11:2b:09:c6:
4a:ea:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:25 2025 by rpki-client